Podatność CVE-2009-4024

Podatność CVE-2009-4024

Publikacja: 2009-11-29 Modyfikacja: 2012-02-13

Opis:

Typ:

(Improper Control of Generation of Code ('Code Injection'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
10/10	10/10	10/10

Affected software
PEAR -> PEAR

http://www.vupen.com/english/advisories/2009/3320

http://pear.php.net/package/Net_Ping/download/2.4.5

http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/

https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01152.html

https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01130.html

https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01044.html

http://xforce.iss.net/xforce/xfdb/54390

http://www.securityfocus.com/bid/37093

http://www.debian.org/security/2009/dsa-1949

http://svn.php.net/viewvc/pear/packages/Net_Ping/trunk/Ping.php?r1=274728&r2=290669&pathrev=290669

http://secunia.com/advisories/37502

http://secunia.com/advisories/37451

http://pear.php.net/advisory20091114-01.txt