NVD

Id
54676  
Name
CVE-2007-2509  
Description
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-05-08  
Modified Date
2012-11-05  
Seq
2007-2509  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277532 54676 CVE-2007-2509 SUSE-SA:2007:044  View
277533 54676 CVE-2007-2509 oval:org.mitre.oval:def:10839  View
277534 54676 CVE-2007-2509 RHSA-2007:0889  View
277535 54676 CVE-2007-2509 GLSA-200705-19  View
277536 54676 CVE-2007-2509 2672  View
277537 54676 CVE-2007-2509 http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm  View
277538 54676 CVE-2007-2509 http://us2.php.net/releases/4_4_7.php  View
277539 54676 CVE-2007-2509 http://us2.php.net/releases/5_2_2.php  View
277540 54676 CVE-2007-2509 DSA-1295  View
277541 54676 CVE-2007-2509 DSA-1296  View
277542 54676 CVE-2007-2509 MDKSA-2007:102  View
277543 54676 CVE-2007-2509 MDKSA-2007:103  View
277544 54676 CVE-2007-2509 RHSA-2007:0349  View
277545 54676 CVE-2007-2509 RHSA-2007:0355  View
277546 54676 CVE-2007-2509 RHSA-2007:0888  View
277547 54676 CVE-2007-2509 20070323 CRLF injection in PHP ftp function  View
277548 54676 CVE-2007-2509 23813  View
277549 54676 CVE-2007-2509 23818  View
277550 54676 CVE-2007-2509 1018022  View
277551 54676 CVE-2007-2509 2007-0017  View
277552 54676 CVE-2007-2509 USN-462-1  View
277553 54676 CVE-2007-2509 ADV-2007-2187  View
277554 54676 CVE-2007-2509 php-ftpputcmd-crlf-injection(34413)  View
277555 54676 CVE-2007-2509 RHSA-2007:0348  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51700 JVNDB-2007-000363 PHP の ftp_putcmd() 関数における CRLF インジェクションの脆弱性 PHP の ftp_putcmd() 関数には、パラメータとして改行文字列を挿入可能であるために、CRLF インジェクションの脆弱性が存在します。 CVE-2007-2509 25864 CVE-2007-2509 54676 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000363.html 2007-05-08 2007-11-02 View