CVE

Id
41459  
CVE No.
CVE-2009-4024  
Status
Candidate  
Description
Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: this has also been reported as a shell metacharacter problem.  
Phase
Assigned (20091120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455514 41459 CVE-2009-4024 CONFIRM:http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/  View
455515 41459 CVE-2009-4024 CONFIRM:http://pear.php.net/advisory20091114-01.txt  View
455516 41459 CVE-2009-4024 CONFIRM:http://pear.php.net/package/Net_Ping/download/2.4.5  View
455517 41459 CVE-2009-4024 CONFIRM:http://svn.php.net/viewvc/pear/packages/Net_Ping/trunk/Ping.php?r1=274728&r2=290669&pathrev=290669  View
455518 41459 CVE-2009-4024 DEBIAN:DSA-1949  View
455519 41459 CVE-2009-4024 URL:http://www.debian.org/security/2009/dsa-1949  View
455520 41459 CVE-2009-4024 FEDORA:FEDORA-2009-11523  View
455521 41459 CVE-2009-4024 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01044.html  View
455522 41459 CVE-2009-4024 FEDORA:FEDORA-2009-11613  View
455523 41459 CVE-2009-4024 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01152.html  View
455524 41459 CVE-2009-4024 FEDORA:FEDORA-2009-12156  View
455525 41459 CVE-2009-4024 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01130.html  View
455526 41459 CVE-2009-4024 BID:37093  View
455527 41459 CVE-2009-4024 URL:http://www.securityfocus.com/bid/37093  View
455528 41459 CVE-2009-4024 SECUNIA:37451  View
455529 41459 CVE-2009-4024 URL:http://secunia.com/advisories/37451  View
455530 41459 CVE-2009-4024 SECUNIA:37502  View
455531 41459 CVE-2009-4024 URL:http://secunia.com/advisories/37502  View
455532 41459 CVE-2009-4024 VUPEN:ADV-2009-3320  View
455533 41459 CVE-2009-4024 URL:http://www.vupen.com/english/advisories/2009/3320  View
455534 41459 CVE-2009-4024 XF:netping-ping-command-execution(54390)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41391 JVNDB-2009-002398 MySQL における SSL サーバになりすまされる脆弱性 MySQL の vio_verify_callback 関数には、OpenSSL を使用している場合に X.509 証明書の処理に不備があるため、SSL サーバになりすまされる脆弱性が存在します。 CVE-2009-4028 41459 6.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002398.html  View