NVD

Id
51176  
Name
CVE-2009-4023  
Description
Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-11-29  
Modified Date
2010-12-07  
Seq
2009-4023  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259567 51176 CVE-2009-4023 SUSE-SR:2010:020  View
259568 51176 CVE-2009-4023 http://pear.php.net/bugs/bug.php?id=16200  View
259569 51176 CVE-2009-4023 http://pear.php.net/bugs/bug.php?id=16200&edit=12&patch=quick-fix&revision=1241757412  View
259570 51176 CVE-2009-4023 http://svn.php.net/viewvc/pear/packages/Mail/trunk/Mail/sendmail.php?r1=243717&r2=280134  View
259571 51176 CVE-2009-4023 DSA-1938  View
259572 51176 CVE-2009-4023 [oss-security] 20091123 CVE request: Argument injections in multiple PEAR packages  View
259573 51176 CVE-2009-4023 37081  View
259574 51176 CVE-2009-4023 ADV-2009-3300  View
259575 51176 CVE-2009-4023 pear-from-security-bypass(54362)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44125 JVNDB-2009-005132 PEAR の Mail パッケージにおける任意のファイルを読まれる脆弱性 PEAR の Mail パッケージの Mail::Send メソッド (Mail/sendmail.php) の sendmail の実装は、引数の挿入により、任意のファイルを読まれる、および書き込まれる脆弱性が存在します。 CVE-2009-4023 41454 CVE-2009-4023 51176 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005132.html 2009-05-07 2012-09-25 View