NVD

Id
51886  
Name
CVE-2009-4769  
Description
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow (2) remote authenticated users to execute arbitrary code via format string specifiers in a PWD command to the FTP server component.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-04-20  
Modified Date
2010-06-07  
Seq
2009-4769  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262549 51886 CVE-2009-4769 http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rb  View
262550 51886 CVE-2009-4769 http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/http/httpdx_tolog_format.rb  View
262551 51886 CVE-2009-4769 ADV-2009-3312  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38601 JVNDB-2010-004386 httpdx の tolog 関数におけるサービス運用妨害 (DoS) の脆弱性 httpdx の tolog 関数は、ロギングが有効になっている際、フォーマットストリングの不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-4769 42200 CVE-2009-4769 51886 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004386.html 2010-04-20 2012-09-25 View