PHPUnit CVE-2017-9841 Arbitrary Code Execution Vulnerability
BID:101798
Info
PHPUnit CVE-2017-9841 Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 101798 |
| Class: | Design Error |
| CVE: |
CVE-2017-9841 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 27 2017 12:00AM |
| Updated: | Dec 19 2017 10:36PM |
| Credit: | David Mudrák |
| Vulnerable: |
Phpunit Project Phpunit 5.6 Phpunit Project Phpunit 3.3.12 Phpunit Project Phpunit 3.3.11 Phpunit Project Phpunit 3.3.10 Phpunit Project Phpunit 3.3.5 Phpunit Project Phpunit 3.3.4 Phpunit Project Phpunit 3.3.7 Phpunit Project Phpunit 3.3.6 Phpunit Project Phpunit 3.3.3 Phpunit Project Phpunit 3.3.2 Phpunit Project Phpunit 3.3.1 Phpunit Project Phpunit 3.3.0 Moodle Moodle 3.3.1 Moodle Moodle 3.2.4 Moodle Moodle 3.1.7 Moodle Moodle 3.1.4 Moodle Moodle 3.1.3 Moodle Moodle 3.1.2 Moodle Moodle 3.1.1 Moodle Moodle 3.3 Moodle Moodle 3.2.3 Moodle Moodle 3.2.2 Moodle Moodle 3.2.1 Moodle Moodle 3.2 Moodle Moodle 3.1.6 Moodle Moodle 3.1.5 Moodle Moodle 3.1 |
| Not Vulnerable: |
Phpunit Project Phpunit 5.6.3 Phpunit Project Phpunit 4.8.28 Moodle Moodle 3.3.2 Moodle Moodle 3.2.5 Moodle Moodle 3.1.8 |
Exploit / POC
PHPUnit CVE-2017-9841 Arbitrary Code Execution Vulnerability
The researcher has created a functional exploit to demonstrate the issue. Please see the references for more information.
The researcher has created a functional exploit to demonstrate the issue. Please see the references for more information.
Solution / Fix
PHPUnit CVE-2017-9841 Arbitrary Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.