Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-4075HistoryNov 02, 2011 - 5:55 p.m.
CVE-2011-4075
2011-11-0217:55:01
Debian Security Bug Tracker
security-tracker.debian.org
16
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.364
Percentile
97.2%
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpldapadmin | < 1.2.0.5-2.1 | phpldapadmin_1.2.0.5-2.1_all.deb |
| Debian | 999 | all | phpldapadmin | < 1.2.0.5-2.1 | phpldapadmin_1.2.0.5-2.1_all.deb |
| Debian | 13 | all | phpldapadmin | < 1.2.0.5-2.1 | phpldapadmin_1.2.0.5-2.1_all.deb |
Related
cvelist
cvelist
CVE-2011-4075
2011-11-02 17:00:00
checkpoint_advisories
checkpoint_advisories
PHP phpLDAPadmin Remote Code Execution (CVE-2011-4075)
2013-10-13 00:00:00
nessus
nessus
phpLDAPadmin orderby Parameter Arbitrary PHP Code Execution
2011-11-03 00:00:00
Fedora 15 : phpldapadmin-1.2.1.1-2.20111006git.fc15 (2011-14993)
2011-11-26 00:00:00
Fedora 16 : phpldapadmin-1.2.1.1-2.20111006git.fc16 (2011-14924)
2011-11-26 00:00:00
ubuntucve
ubuntucve
CVE-2011-4075
2011-11-02 00:00:00
metasploit
metasploit
phpLDAPadmin query_engine Remote PHP Code Injection
2011-10-24 23:22:32
openvas
openvas
phpLDAPadmin 'functions.php' Remote PHP Code Injection Vulnerability
2011-10-25 00:00:00
phpLDAPadmin 'functions.php' Remote PHP Code Injection Vulnerability
2011-10-25 00:00:00
Debian Security Advisory DSA 2333-1 (phpldapadmin)
2012-02-11 00:00:00
exploitdb
exploitdb
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (Metasploit) (2)
2011-10-25 00:00:00
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1)
2011-10-23 00:00:00
cve
cve
CVE-2011-4075
2011-11-02 17:55:01
prion
prion
Code injection
2011-11-02 17:55:00
dsquare
dsquare
phpLDAPadmin 1.2.1.1 RCE
2012-01-29 00:00:00
nvd
nvd
CVE-2011-4075
2011-11-02 17:55:01
osv
osv
phpldapadmin - several issues
2011-10-31 00:00:00
debian
debian
[SECURITY] [DSA 2333-1] phpldapadmin security update
2011-10-30 12:29:53
fedora
fedora
[SECURITY] Fedora 15 Update: phpldapadmin-1.2.1.1-2.20111006git.fc15
2011-11-25 02:05:42
[SECURITY] Fedora 16 Update: phpldapadmin-1.2.1.1-2.20111006git.fc16
2011-11-25 01:52:56
[SECURITY] Fedora 14 Update: phpldapadmin-1.2.1.1-2.20111006git.fc14
2011-11-25 01:56:24
securityvulns
securityvulns
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.364
Percentile
97.2%
Related for DEBIANCVE:CVE-2011-4075