CVE

Id
41460  
CVE No.
CVE-2009-4025  
Status
Candidate  
Description
Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20091120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455535 41460 CVE-2009-4025 MLIST:[oss-security] 20091123 CVE request: Argument injections in multiple PEAR packages  View
455536 41460 CVE-2009-4025 URL:http://www.openwall.com/lists/oss-security/2009/11/23/8  View
455537 41460 CVE-2009-4025 CONFIRM:http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/  View
455538 41460 CVE-2009-4025 CONFIRM:http://pear.php.net/advisory20091114-01.txt  View
455539 41460 CVE-2009-4025 CONFIRM:http://pear.php.net/package/Net_Traceroute/download/0.21.2  View
455540 41460 CVE-2009-4025 FEDORA:FEDORA-2009-11551  View
455541 41460 CVE-2009-4025 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01110.html  View
455542 41460 CVE-2009-4025 FEDORA:FEDORA-2009-11617  View
455543 41460 CVE-2009-4025 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00998.html  View
455544 41460 CVE-2009-4025 FEDORA:FEDORA-2009-12083  View
455545 41460 CVE-2009-4025 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01007.html  View
455546 41460 CVE-2009-4025 GENTOO:GLSA-200911-06  View
455547 41460 CVE-2009-4025 URL:http://security.gentoo.org/glsa/glsa-200911-06.xml  View
455548 41460 CVE-2009-4025 BID:37094  View
455549 41460 CVE-2009-4025 URL:http://www.securityfocus.com/bid/37094  View
455550 41460 CVE-2009-4025 OSVDB:60515  View
455551 41460 CVE-2009-4025 URL:http://osvdb.org/60515  View
455552 41460 CVE-2009-4025 SECUNIA:37497  View
455553 41460 CVE-2009-4025 URL:http://secunia.com/advisories/37497  View
455554 41460 CVE-2009-4025 SECUNIA:37503  View
455555 41460 CVE-2009-4025 URL:http://secunia.com/advisories/37503  View
455556 41460 CVE-2009-4025 VUPEN:ADV-2009-3321  View
455557 41460 CVE-2009-4025 URL:http://www.vupen.com/english/advisories/2009/3321  View
455558 41460 CVE-2009-4025 XF:nettraceroute-traceroute-command-execution(54391)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41525 JVNDB-2009-002532 GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性 GNU Automake の dist または distcheck ルールには、パッケージの tarball 配布を生成する際に、ビルドツリー以下のディレクトリに安全でないパーミッション (777) を付与する不備があるため、パッケージファイルのコンテンツを変更される脆弱性が存在します。 CVE-2009-4029 41460 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002532.html  View