CVE

Id
41458  
CVE No.
CVE-2009-4023  
Status
Candidate  
Description
Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111.  
Phase
Assigned (20091120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455495 41458 CVE-2009-4023 MLIST:[oss-security] 20091123 CVE request: Argument injections in multiple PEAR packages  View
455496 41458 CVE-2009-4023 URL:http://www.openwall.com/lists/oss-security/2009/11/23/8  View
455497 41458 CVE-2009-4023 CONFIRM:http://pear.php.net/bugs/bug.php?id=16200  View
455498 41458 CVE-2009-4023 CONFIRM:http://pear.php.net/bugs/bug.php?id=16200&edit=12&patch=quick-fix&revision=1241757412  View
455499 41458 CVE-2009-4023 CONFIRM:http://svn.php.net/viewvc/pear/packages/Mail/trunk/Mail/sendmail.php?r1=243717&r2=280134  View
455500 41458 CVE-2009-4023 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=294256  View
455501 41458 CVE-2009-4023 DEBIAN:DSA-1938  View
455502 41458 CVE-2009-4023 URL:http://www.debian.org/security/2009/dsa-1938  View
455503 41458 CVE-2009-4023 SUSE:SUSE-SR:2010:020  View
455504 41458 CVE-2009-4023 URL:http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html  View
455505 41458 CVE-2009-4023 BID:37081  View
455506 41458 CVE-2009-4023 URL:http://www.securityfocus.com/bid/37081  View
455507 41458 CVE-2009-4023 SECUNIA:37410  View
455508 41458 CVE-2009-4023 URL:http://secunia.com/advisories/37410  View
455509 41458 CVE-2009-4023 SECUNIA:37458  View
455510 41458 CVE-2009-4023 URL:http://secunia.com/advisories/37458  View
455511 41458 CVE-2009-4023 VUPEN:ADV-2009-3300  View
455512 41458 CVE-2009-4023 URL:http://www.vupen.com/english/advisories/2009/3300  View
455513 41458 CVE-2009-4023 XF:pear-from-security-bypass(54362)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41522 JVNDB-2009-002529 Linux kernel の mac80211 サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の mac80211 サブシステムには、Delete Block ACK (DELBA) パケットの処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-4027 41458 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002529.html  View