CVE-2009-1525
Summary
| CVE | CVE-2009-1525 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-05-05 20:30:00 UTC |
| Updated | 2017-08-17 01:30:00 UTC |
| Description | CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jbmc-software | Directadmin | 0.95 | All | All | All |
| Application | Jbmc-software | Directadmin | 1 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.01 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.02 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.03 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.04 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.05 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.06 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.07 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.08 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.081 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.09 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.1 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.11 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.111 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.12 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.121 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.13 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.14 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.15 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.151 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.152 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.16 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.161 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.17 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.171 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.172 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.173 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.174 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.1741 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.18 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.181 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.19 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.192 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.193 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.1941 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.195 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.196 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.2 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.201 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.202 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.203 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.204 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.205 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.206 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.207 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.21 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.211 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.212 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.213 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.22 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.221 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.222 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.223 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.224 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.225 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.226 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.23 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.231 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.232 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.233 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.234 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.235 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.24 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.241 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.242 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.243 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.244 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.25 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.251 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.252 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.253 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.254 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.255 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.26 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.261 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.262 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.263 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.264 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.265 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.266 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.27 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.273 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.274 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.275 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.28 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.281 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.282 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.285 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.286 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.29 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.291 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.292 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.293 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.294 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.295 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.296 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.297 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.3 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.301 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.302 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.31 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.311 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.312 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.313 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.314 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.315 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.32 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.321 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.322 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.323 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.33 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.331 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.332 | All | All | All |
| Application | Jbmc-software | Directadmin | 0.95 | All | All | All |
| Application | Jbmc-software | Directadmin | 1 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.01 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.02 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.03 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.04 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.05 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.06 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.07 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.08 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.081 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.09 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.1 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.11 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.111 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.12 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.121 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.13 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.14 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.15 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.151 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.152 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.16 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.161 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.17 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.171 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.172 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.173 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.174 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.1741 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.18 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.181 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.19 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.192 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.193 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.1941 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.195 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.196 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.2 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.201 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.202 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.203 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.204 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.205 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.206 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.207 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.21 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.211 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.212 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.213 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.22 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.221 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.222 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.223 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.224 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.225 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.226 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.23 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.231 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.232 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.233 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.234 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.235 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.24 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.241 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.242 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.243 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.244 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.25 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.251 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.252 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.253 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.254 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.255 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.26 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.261 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.262 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.263 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.264 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.265 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.266 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.27 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.273 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.274 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.275 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.28 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.281 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.282 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.285 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.286 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.29 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.291 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.292 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.293 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.294 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.295 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.296 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.297 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.3 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.301 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.302 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.31 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.311 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.312 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.313 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.314 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.315 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.32 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.321 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.322 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.323 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.33 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.331 | All | All | All |
| Application | Jbmc-software | Directadmin | 1.332 | All | All | All |
| Application | Jbmc-software | Directadmin | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Resolved issue with database backup/restore | CONFIRM | www.directadmin.com | Vendor Advisory |
| 20090422 DirectAdmin < 1.33.4 Local file overwrite & Local root escalation | FULLDISC | archives.neohapsis.com | Exploit |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| DirectAdmin Database Backup and Restore Vulnerabilities - Advisories - Community | SECUNIA | secunia.com | Vendor Advisory |
| 54015 | OSVDB | osvdb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.