PEAR Net_Ping 'ping()' Function Arbitrary Argument Injection Vulnerability
BID:37093
Info
PEAR Net_Ping 'ping()' Function Arbitrary Argument Injection Vulnerability
| Bugtraq ID: | 37093 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-4024 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 14 2009 12:00AM |
| Updated: | Apr 13 2015 10:17PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
PEAR Net_Ping 2.4.4 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
PEAR Net_Ping 2.4.5 |
Discussion
PEAR Net_Ping 'ping()' Function Arbitrary Argument Injection Vulnerability
PEAR Net_Ping is prone to a remote argument-injection vulnerability because it fails to adequately sanitize user-supplied input data.
Remote attackers can exploit this issue to execute arbitrary commands within the context of the affected application. Successful exploits will compromise the affected application and possibly the computer.
Versions prior to PEAR Net_Ping 2.4.5 are vulnerable.
PEAR Net_Ping is prone to a remote argument-injection vulnerability because it fails to adequately sanitize user-supplied input data.
Remote attackers can exploit this issue to execute arbitrary commands within the context of the affected application. Successful exploits will compromise the affected application and possibly the computer.
Versions prior to PEAR Net_Ping 2.4.5 are vulnerable.
Exploit / POC
PEAR Net_Ping 'ping()' Function Arbitrary Argument Injection Vulnerability
An attacker can exploit the issue via a browser.
An attacker can exploit the issue via a browser.
Solution / Fix
PEAR Net_Ping 'ping()' Function Arbitrary Argument Injection Vulnerability
Solution:
Updates are available. Please see the references for more information.
Debian Linux 4.0 amd64
Debian Linux 4.0 ia-32
Debian Linux 4.0 arm
Debian Linux 5.0 hppa
Debian Linux 5.0 ia-64
Debian Linux 4.0 hppa
Debian Linux 4.0 sparc
Debian Linux 4.0 s/390
Debian Linux 5.0 m68k
Debian Linux 5.0 arm
Debian Linux 4.0 powerpc
Debian Linux 4.0 alpha
Debian Linux 4.0 armel
Debian Linux 5.0 armel
Debian Linux 4.0 m68k
Debian Linux 5.0
Debian Linux 4.0
Debian Linux 4.0 mipsel
Debian Linux 5.0 amd64
Debian Linux 5.0 alpha
Debian Linux 5.0 ia-32
Debian Linux 5.0 mips
Debian Linux 5.0 s/390
Debian Linux 5.0 mipsel
Debian Linux 5.0 powerpc
Debian Linux 4.0 ia-64
Debian Linux 4.0 mips
Debian Linux 5.0 sparc
Solution:
Updates are available. Please see the references for more information.
Debian Linux 4.0 amd64
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 4.0 ia-32
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 4.0 arm
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 5.0 hppa
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 5.0 ia-64
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 4.0 hppa
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 4.0 sparc
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 4.0 s/390
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 5.0 m68k
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 5.0 arm
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 4.0 powerpc
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 4.0 alpha
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 4.0 armel
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 5.0 armel
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 4.0 m68k
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 5.0
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 4.0
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 4.0 mipsel
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 5.0 amd64
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 5.0 alpha
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 5.0 ia-32
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 5.0 mips
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 5.0 s/390
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 5.0 mipsel
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 5.0 powerpc
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
Debian Linux 4.0 ia-64
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 4.0 mips
-
Debian php-net-ping_2.4.2-1+etch1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb
Debian Linux 5.0 sparc
-
Debian php-net-ping_2.4.2-1+lenny1_all.deb
http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb
References
PEAR Net_Ping 'ping()' Function Arbitrary Argument Injection Vulnerability
References:
References:
- Bugzilla Bug 294258 (Alex Legler)
- PEAR Home Page (PEAR)
- PEAR Net_Ping and Net_Traceroute Remote Arbitrary Command Injection (PEAR)
- Revision 274728 (PEAR)