Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2005-4154

Опубликовано: 11 дек. 2005
Источник: nvd
CVSS2: 5.1
EPSS Низкий

Описание

Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:pear:*:*:*:*:*:*:*:*
Версия до 1.4.2 (включая)
cpe:2.3:a:php:pear:0.9:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:0.10:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:0.11:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:0.90:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.0:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.2:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.6:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.0:rc1:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.0:rc2:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01244
Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

ubuntu
больше 19 лет назад

Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.

debian
больше 19 лет назад

Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows u ...

github
больше 3 лет назад

Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.

EPSS

Процентиль: 78%
0.01244
Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-noinfo