10

CVE-2009-3102

The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_BINPATH variable.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zmanda ≫ Zrm For My Sql Version2.1 Editioncommunity
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.32% 0.87
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://forums.zmanda.com/showthread.php?p=8068
http://secunia.com/advisories/36424
Vendor Advisory
http://secunia.com/advisories/36429
Vendor Advisory
http://twitter.com/elegerov/statuses/3518763099
http://twitter.com/elegerov/statuses/3547652507
http://www.intevydis.com/blog/?p=51
https://exchange.xforce.ibmcloud.com/vulnerabilities/52977
https://exchange.xforce.ibmcloud.com/vulnerabilities/52978