NVD

Id
51178  
Name
CVE-2009-4025  
Description
Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-11-29  
Modified Date
2009-12-19  
Seq
2009-4025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259587 51178 CVE-2009-4025 http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/  View
259588 51178 CVE-2009-4025 http://pear.php.net/advisory20091114-01.txt  View
259589 51178 CVE-2009-4025 http://pear.php.net/package/Net_Traceroute/download/0.21.2  View
259590 51178 CVE-2009-4025 GLSA-200911-06  View
259591 51178 CVE-2009-4025 [oss-security] 20091123 CVE request: Argument injections in multiple PEAR packages  View
259592 51178 CVE-2009-4025 37094  View
259593 51178 CVE-2009-4025 ADV-2009-3321  View
259594 51178 CVE-2009-4025 nettraceroute-traceroute-command-execution(54391)  View
259595 51178 CVE-2009-4025 FEDORA-2009-11617  View
259596 51178 CVE-2009-4025 FEDORA-2009-12083  View
259597 51178 CVE-2009-4025 FEDORA-2009-11551  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44127 JVNDB-2009-005134 PEAR の Net_Traceroute パッケージにおける任意のシェルコマンドを実行される脆弱性 PEAR の Net_Traceroute パッケージの Traceroute.php の traceroute 関数は、引数の挿入により、任意のシェルコマンドを実行される脆弱性が存在します。 CVE-2009-4025 41456 CVE-2009-4025 51178 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005134.html 2009-11-14 2012-09-25 View