CVE-2009-3233

Опубликовано: 17 сент. 2009

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack.

Ссылки

http://bugs.debian.org/546791
Exploit
Patch
http://secunia.com/advisories/36756
Vendor Advisory
http://www.openwall.com/lists/oss-security/2009/09/16/3
http://www.securityfocus.com/bid/36420
Exploit
http://bugs.debian.org/546791
Exploit
Patch
http://secunia.com/advisories/36756
Vendor Advisory
http://www.openwall.com/lists/oss-security/2009/09/16/3
http://www.securityfocus.com/bid/36420
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cameron_morland:changetrack:4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00953

Низкий

7.2 High

CVSS2

Дефекты

CWE-78

Связанные уязвимости

CVE-2009-3233

ubuntu

почти 17 лет назад

changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack.

CVE-2009-3233

debian

почти 17 лет назад

changetrack 4.3 allows local users to execute arbitrary commands via C ...

GHSA-62jg-wqh5-h6g8

github

больше 4 лет назад

changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack.

EPSS

Процентиль: 58%

0.00953

Низкий

7.2 High

CVSS2

Дефекты

CWE-78