CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used.

• CWE-77

• http://matthias.sdfeu.org/devel/net-ping-external-cmd-injection.patchIssue Tracking, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/07/4Issue Tracking, Mailing List, Patch, Third Party Advisory
• https://bugs.debian.org/881097Issue Tracking, Patch, Third Party Advisory
• https://rt.cpan.org/Public/Bug/Display.html?id=33230Issue Tracking, Third Party Advisory
• http://matthias.sdfeu.org/devel/net-ping-external-cmd-injection.patchIssue Tracking, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/07/4Issue Tracking, Mailing List, Patch, Third Party Advisory
• https://bugs.debian.org/881097Issue Tracking, Patch, Third Party Advisory
• https://rt.cpan.org/Public/Bug/Display.html?id=33230Issue Tracking, Third Party Advisory

Published

Nov 7, 2017

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-7311The session cookie store implementation in Spree 0.2.0 uses …
• CVE-2008-7312The Filtering Service in Websense Enterprise 5.2 through 6.3…
• CVE-2008-7313The _httpsrequest function in Snoopy allows remote attackers…
• CVE-2008-7314mIRC before 6.35 allows attackers to cause a denial of servi…7.5
• CVE-2008-7315UI-Dialog 1.09 and earlier allows remote attackers to execut…
• CVE-2008-7316mm/filemap.c in the Linux kernel before 2.6.25 allows local …
• CVE-2008-7320GNOME Seahorse through 3.30 allows physically proximate atta…
• CVE-2008-7321The tubepress plugin before 1.6.5 for WordPress has XSS.