Lucene search
Ubuntu.comUB:CVE-2009-4024HistoryNov 29, 2009 - 12:00 a.m.
CVE-2009-4024
2009-11-2900:00:00
ubuntu.com
ubuntu.com
8
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.011
Percentile
84.6%
Argument injection vulnerability in the ping function in Ping.php in the
Net_Ping package before 2.4.5 for PEAR allows remote attackers to execute
arbitrary shell commands via the host parameter. NOTE: this has also been
reported as a shell metacharacter problem.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | php-net-ping | < 2.4.2-1+etch1build0.8.04.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | php-net-ping | < 2.4.2-1+etch1build0.8.10.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | php-net-ping | < 2.4.2-1+etch1build0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | php-net-ping | < 2.4.2-1+etch1build0.9.10.1 | UNKNOWN |
Related
osv
osv
php-net-ping - arbitrary code execution
2009-12-12 00:00:00
nessus
nessus
Fedora 11 : php-pear-Net-Ping-2.4.5-1.fc11 (2009-11613)
2009-11-30 00:00:00
Fedora 12 : php-pear-Net-Ping-2.4.5-1.fc12 (2009-11523)
2009-11-30 00:00:00
Debian DSA-1949-1 : php-net-ping - programming error
2010-02-24 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: php-pear-Net-Ping-2.4.5-1.fc10
2009-11-25 15:28:19
[SECURITY] Fedora 12 Update: php-pear-Net-Ping-2.4.5-1.fc12
2009-11-25 15:08:58
[SECURITY] Fedora 11 Update: php-pear-Net-Ping-2.4.5-1.fc11
2009-11-25 15:33:37
nvd
nvd
CVE-2009-4024
2009-11-29 13:07:35
cvelist
cvelist
CVE-2009-4024
2009-11-28 17:00:00
openvas
openvas
Debian Security Advisory DSA 1949-1 (php-net-ping)
2009-12-14 00:00:00
Debian: Security Advisory (DSA-1949-1)
2009-12-14 00:00:00
FreeBSD Ports: pear-Net_Ping
2010-01-07 00:00:00
cve
cve
CVE-2009-4024
2009-11-29 13:07:35
prion
prion
Design/Logic Flaw
2009-11-29 13:07:00
debian
debian
freebsd
freebsd
PEAR -- Net_Ping and Net_Traceroute remote arbitrary command injection
2009-11-14 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.011
Percentile
84.6%
Related for UB:CVE-2009-4024