NVD

Id
51177  
Name
CVE-2009-4024  
Description
Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: this has also been reported as a shell metacharacter problem.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-11-29  
Modified Date
2010-04-15  
Seq
2009-4024  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259576 51177 CVE-2009-4024 http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/  View
259577 51177 CVE-2009-4024 http://pear.php.net/advisory20091114-01.txt  View
259578 51177 CVE-2009-4024 http://pear.php.net/package/Net_Ping/download/2.4.5  View
259579 51177 CVE-2009-4024 http://svn.php.net/viewvc/pear/packages/Net_Ping/trunk/Ping.php?r1=274728&r2=290669&pathrev=290669  View
259580 51177 CVE-2009-4024 DSA-1949  View
259581 51177 CVE-2009-4024 37093  View
259582 51177 CVE-2009-4024 ADV-2009-3320  View
259583 51177 CVE-2009-4024 netping-ping-command-execution(54390)  View
259584 51177 CVE-2009-4024 FEDORA-2009-11523  View
259585 51177 CVE-2009-4024 FEDORA-2009-12156  View
259586 51177 CVE-2009-4024 FEDORA-2009-11613  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44126 JVNDB-2009-005133 PEAR の Net_Ping パッケージにおける任意のシェルコマンドを実行される脆弱性 PEAR の Net_Ping パッケージの Ping.php の ping 関数は、引数の挿入により、任意のシェルコマンドを実行される脆弱性が存在します。 CVE-2009-4024 41455 CVE-2009-4024 51177 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005133.html 2009-11-14 2012-09-25 View