CVE

Id
39700  
CVE No.
CVE-2009-2265  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory.  
Phase
Assigned (20090629)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436307 39700 CVE-2009-2265 BUGTRAQ:20090703 [oCERT-2009-007] FCKeditor input sanitization errors  View
436308 39700 CVE-2009-2265 URL:http://www.securityfocus.com/archive/1/archive/1/504721/100/0/threaded  View
436309 39700 CVE-2009-2265 MLIST:[Zope-dev] 20090706 zope.html with FCKEditor security fix  View
436310 39700 CVE-2009-2265 URL:http://mail.zope.org/pipermail/zope-dev/2009-July/037195.html  View
436311 39700 CVE-2009-2265 MISC:http://isc.sans.org/diary.html?storyid=6724  View
436312 39700 CVE-2009-2265 MISC:http://www.ocert.org/advisories/ocert-2009-007.html  View
436313 39700 CVE-2009-2265 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=695430  View
436314 39700 CVE-2009-2265 DEBIAN:DSA-1836  View
436315 39700 CVE-2009-2265 URL:http://www.debian.org/security/2009/dsa-1836  View
436316 39700 CVE-2009-2265 FEDORA:FEDORA-2009-7761  View
436317 39700 CVE-2009-2265 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00710.html  View
436318 39700 CVE-2009-2265 FEDORA:FEDORA-2009-7794  View
436319 39700 CVE-2009-2265 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00750.html  View
436320 39700 CVE-2009-2265 SECTRACK:1022513  View
436321 39700 CVE-2009-2265 URL:http://www.securitytracker.com/id?1022513  View
436322 39700 CVE-2009-2265 SECUNIA:35833  View
436323 39700 CVE-2009-2265 URL:http://secunia.com/advisories/35833  View
436324 39700 CVE-2009-2265 SECUNIA:35909  View
436325 39700 CVE-2009-2265 URL:http://secunia.com/advisories/35909  View
436326 39700 CVE-2009-2265 VUPEN:ADV-2009-1813  View
436327 39700 CVE-2009-2265 URL:http://www.vupen.com/english/advisories/2009/1813  View
436328 39700 CVE-2009-2265 VUPEN:ADV-2009-1825  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43770 JVNDB-2009-004777 Empire CMS における SQL インジェクションの脆弱性 Empire CMS には、SQL インジェクションの脆弱性が存在します。 CVE-2009-2269 39700 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004777.html  View