NVD

Id
51283  
Name
CVE-2009-4137  
Description
The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the unserialize function, which allows remote attackers to execute arbitrary code or upload arbitrary files via vectors related to the __destruct function in the Piwik_Config class; php://filter URIs; the __destruct functions in Zend Framework, as demonstrated by the Zend_Log destructor; the shutdown functions in Zend Framework, as demonstrated by the Zend_Log_Writer_Mail class; the render function in the Piwik_View class; Smarty templates; and the _eval function in Smarty.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-12-24  
Modified Date
2009-12-28  
Seq
2009-4137  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260111 51283 CVE-2009-4137 http://dev.piwik.org/trac/changeset/1637  View
260112 51283 CVE-2009-4137 http://piwik.org/blog/2009/12/piwik-response-to-shocking-news-in-php-exploitation/  View
260113 51283 CVE-2009-4137 [oss-security] 20091209 Piwik <= 0.4.5 Cookie Unserialize() Vulnerability  View
260114 51283 CVE-2009-4137 [oss-security] 20091210 Re: Piwik <= 0.4.5 Cookie Unserialize() Vulnerability  View
260115 51283 CVE-2009-4137 [oss-security] 20091214 Re: Piwik <= 0.4.5 Cookie Unserialize() Vulnerability  View
260116 51283 CVE-2009-4137 http://www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/  View
260117 51283 CVE-2009-4137 http://www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/  View
260118 51283 CVE-2009-4137 http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45491 JVNDB-2009-006498 Piwik の core/Cookie.php における任意のコードを実行される脆弱性 Piwik の core/Cookie.php は、unserialize 関数を呼び出す前にクッキーから取得した文字列を検証しない、およびPiwik_Config クラスの __destruct 関数、php://filter URI、Zend フレームワークの __destruct 関数、Zend フレームワークのshutdown 関数、Piwik_View クラスの render 関数、Smarty テンプレート、および Smarty の _eval 関数に関する処理に不備があるため、任意のコードを実行される、および任意のファイルをアップロードされる脆弱性が存在します。 CVE-2009-4137 41568 CVE-2009-4137 51283 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006498.html 2009-12-09 2012-12-20 View