5.1

CVE-2005-4154

Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Pear Version <= 1.4.2
Php ≫ Pear Version 0.9
Php ≫ Pear Version 0.10
Php ≫ Pear Version 0.11
Php ≫ Pear Version 0.90
Php ≫ Pear Version 1.0
Php ≫ Pear Version 1.0.1
Php ≫ Pear Version 1.1
Php ≫ Pear Version 1.2
Php ≫ Pear Version 1.2.1
Php ≫ Pear Version 1.3
Php ≫ Pear Version 1.3.1
Php ≫ Pear Version 1.3.3
Php ≫ Pear Version 1.3.3.1
Php ≫ Pear Version 1.3.4
Php ≫ Pear Version 1.3.5
Php ≫ Pear Version 1.3.6
Php ≫ Pear Version 1.4.0
Php ≫ Pear Version 1.4.0 Update rc1
Php ≫ Pear Version 1.4.0 Update rc2
Php ≫ Pear Version 1.4.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.38% 0.936
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://pear.php.net/advisory-20051104.txt
Patch
Vendor Advisory
http://secunia.com/advisories/17563/
Patch
Vendor Advisory
http://securitytracker.com/alerts/2005/Nov/1015161.html
Patch
http://www.vupen.com/english/advisories/2005/2444
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/23021