NVD

Id
47592  
Name
CVE-2009-0258  
Description
The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-01-22  
Modified Date
2009-02-05  
Seq
2009-0258  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238488 47592 CVE-2009-0258 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/  View
238489 47592 CVE-2009-0258 DSA-1711  View
238490 47592 CVE-2009-0258 [oss-security] 20090123 Re: CVE id request: typo3 SA-2009-001  View
238491 47592 CVE-2009-0258 33376  View
238492 47592 CVE-2009-0258 typo3-indexedsearch-command-execution(48138)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44747 JVNDB-2009-005754 TYPO3 の indexed_search システムエクステンションにおける任意のコマンドを実行される脆弱性 TYPO3 の Indexed Search Engine (indexed_search) システムエクステンションは、コマンドラインのインデクサーによって適切に処理しないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2009-0258 37689 CVE-2009-0258 47592 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005754.html 2009-01-22 2012-12-20 View