CVE

Id
51987  
CVE No.
CVE-2011-4075  
Status
Candidate  
Description
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.  
Phase
Assigned (20111018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
557031 51987 CVE-2011-4075 EXPLOIT-DB:18021  View
557032 51987 CVE-2011-4075 URL:http://www.exploit-db.com/exploits/18021/  View
557033 51987 CVE-2011-4075 MLIST:[oss-security] 20111024 CVE request: phpldapadmin <= 1.2.1.1 XSS and and code injection flaws  View
557034 51987 CVE-2011-4075 URL:http://openwall.com/lists/oss-security/2011/10/24/9  View
557035 51987 CVE-2011-4075 MLIST:[oss-security] 20111025 Re: CVE request: phpldapadmin <= 1.2.1.1 XSS and and code injection flaws  View
557036 51987 CVE-2011-4075 URL:http://openwall.com/lists/oss-security/2011/10/25/2  View
557037 51987 CVE-2011-4075 MISC:http://dev.metasploit.com/redmine/issues/5820  View
557038 51987 CVE-2011-4075 CONFIRM:http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin;a=blobdiff;f=lib/functions.php;h=eb160dc9f7d74e563131e21d4c85d7849a0c6638;hp=19fde9974d4e5eb3bfac04bb223ccbefdb98f9a0;hb=76e6dad13ef77c5448b8dfed1a61e4acc7241165;hpb=5d4245f93ae6f065e7535f268e3cd87a23b07744  View
557039 51987 CVE-2011-4075 CONFIRM:http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page  View
557040 51987 CVE-2011-4075 CONFIRM:http://sourceforge.net/tracker/index.php?func=detail&aid=3417184&group_id=61828&atid=498546  View
557041 51987 CVE-2011-4075 DEBIAN:DSA-2333  View
557042 51987 CVE-2011-4075 URL:http://www.debian.org/security/2011/dsa-2333  View
557043 51987 CVE-2011-4075 BID:50331  View
557044 51987 CVE-2011-4075 URL:http://www.securityfocus.com/bid/50331  View
557045 51987 CVE-2011-4075 OSVDB:76594  View
557046 51987 CVE-2011-4075 URL:http://osvdb.org/76594  View
557047 51987 CVE-2011-4075 SECUNIA:46551  View
557048 51987 CVE-2011-4075 URL:http://secunia.com/advisories/46551  View
557049 51987 CVE-2011-4075 SECUNIA:46672  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26841 JVNDB-2012-002548 Linux Kernel の sysrq_sysctl_handler 関数におけるアクセス制限を回避される脆弱性 Linux Kernel の kernel/sysctl.c 内の sysrq_sysctl_handler 関数は、dmesg_restrict 値の変更に CAP_SYS_ADMIN を要求しないため、アクセス制限を回避される、およびカーネルのリングバッファを読み取られる脆弱性が存在します。 CVE-2011-4080 51987 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002548.html  View