CVE-2007-5208

Published 13 Oct 2007 · Updated 07 Aug 2024

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 67%

from disclosure to weapon1092 days

Published on NVDOct 13

1st PoC+1092d

metasploitOct 4

exploitation probability

67%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗

Fixed

2 products (34 components)

Red Hat Enterprise Linux (v. 5 server) · Red Hat Enterprise Linux Desktop (v. 5 client)

fix ↗

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16837

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References