Lucene search

[email protected]CVE-2009-4412

HistoryDec 24, 2009 - 4:30 p.m.

CVE-2009-4412

2009-12-2416:30:00

[email protected]

web.nvd.nist.gov

vulnerability

file upload

serendipity

cve-2009-4412

code execution

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

s9yserendipityRange≤1.5beta1

s9yserendipityMatch0.3

s9yserendipityMatch0.4

s9yserendipityMatch0.5

s9yserendipityMatch0.5pl1

s9yserendipityMatch0.6

s9yserendipityMatch0.6pl3

s9yserendipityMatch0.7

s9yserendipityMatch0.7.1

s9yserendipityMatch0.8

s9yserendipityMatch0.8.1

s9yserendipityMatch0.8.2

s9yserendipityMatch0.8.3

s9yserendipityMatch0.8.4

s9yserendipityMatch0.8.5

s9yserendipityMatch0.9

s9yserendipityMatch0.9.1

s9yserendipityMatch1.0

s9yserendipityMatch1.0.1

s9yserendipityMatch1.0.2

s9yserendipityMatch1.0.3

s9yserendipityMatch1.0.4

s9yserendipityMatch1.1

s9yserendipityMatch1.1beta1

s9yserendipityMatch1.1.1

s9yserendipityMatch1.1.2

s9yserendipityMatch1.1.3

s9yserendipityMatch1.1.4

s9yserendipityMatch1.2

s9yserendipityMatch1.2.1

s9yserendipityMatch1.3

s9yserendipityMatch1.3.1

s9yserendipityMatch1.4

s9yserendipityMatch1.4.1

CPENameOperatorVersion
s9y:serendipitys9y serendipityle1.5
s9y:serendipitys9y serendipityeq0.3
s9y:serendipitys9y serendipityeq0.4
s9y:serendipitys9y serendipityeq0.5
s9y:serendipitys9y serendipityeq0.6
s9y:serendipitys9y serendipityeq0.7
s9y:serendipitys9y serendipityeq0.7.1
s9y:serendipitys9y serendipityeq0.8
s9y:serendipitys9y serendipityeq0.8.1
s9y:serendipitys9y serendipityeq0.8.2

CPE	Name	Operator	Version
s9y:serendipity	s9y serendipity	le	1.5
s9y:serendipity	s9y serendipity	eq	0.3
s9y:serendipity	s9y serendipity	eq	0.4
s9y:serendipity	s9y serendipity	eq	0.5
s9y:serendipity	s9y serendipity	eq	0.6
s9y:serendipity	s9y serendipity	eq	0.7
s9y:serendipity	s9y serendipity	eq	0.7.1
s9y:serendipity	s9y serendipity	eq	0.8
s9y:serendipity	s9y serendipity	eq	0.8.1
s9y:serendipity	s9y serendipity	eq	0.8.2

Rows per page:

1-10 of 311

References

blog.s9y.org/archives/211-Serendipity-1.5-released.html

osvdb.org/61245

secunia.com/advisories/37830

www.openwall.com/lists/oss-security/2009/12/21/1

www.vupen.com/english/advisories/2009/3626

exchange.xforce.ibmcloud.com/vulnerabilities/54985

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Related for CVE-2009-4412

openvas1 ubuntucve1 nvd1 cvelist1 prion1