FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-29 07:54:42 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
56ba8728-f987-11de-b28d-00215c6a37bbPEAR -- Net_Ping and Net_Traceroute remote arbitrary command injection

PEAR Security Advisory reports:

Multiple remote arbitrary command injections have been found in the Net_Ping and Net_Traceroute.

When input from forms are used directly, the attacker could pass variables that would allow him to execute remote arbitrary command injections.


Discovery 2009-11-14
Entry 2010-01-04
pear-Net_Ping
< 2.4.5

pear-Net_Traceroute
< 0.21.2

37093
37094
CVE-2009-4024
CVE-2009-4025
http://pear.php.net/advisory20091114-01.txt