Lucene search

[email protected]CVE-2011-5274

HistoryMar 21, 2014 - 4:38 a.m.

CVE-2011-5274

2014-03-2104:38:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2011-5274

domain technologie control

dtc

remote attackers

arbitrary commands

shell metacharacters

security vulnerability

nvd

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.8%

JSON

The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter in a do_install action to dtc/.

CPENameOperatorVersion
gplhost:domain_technologie_controlgplhost domain technologie controleq0.29.8
gplhost:domain_technologie_controlgplhost domain technologie controleq0.28.9
gplhost:domain_technologie_controlgplhost domain technologie controleq0.32.1
gplhost:domain_technologie_controlgplhost domain technologie controleq0.25.3
gplhost:domain_technologie_controlgplhost domain technologie controleq0.30.6
gplhost:domain_technologie_controlgplhost domain technologie controleq0.26.9
gplhost:domain_technologie_controlgplhost domain technologie controleq0.29.1
gplhost:domain_technologie_controlgplhost domain technologie controleq0.27.3
gplhost:domain_technologie_controlgplhost domain technologie controleq0.28.4
gplhost:domain_technologie_controlgplhost domain technologie controleq0.32.3

CPE	Name	Operator	Version
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.29.8
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.28.9
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.32.1
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.25.3
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.30.6
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.26.9
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.29.1
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.27.3
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.28.4
gplhost:domain_technologie_control	gplhost domain technologie control	eq	0.32.3

Rows per page:

1-10 of 341

References

git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bh=dec9970db76b82295e9003ca34cecab8d629da4f%3Bhb=65a7a1b166ea3c4325efd4da80a78498c829aa5a

git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=541d8457a6989a1a925bb866ed972a5f07c2de64

www.debian.org/security/2011/dsa-2365

bugs.debian.org/cgi-bin/bugreport.cgi?bug=637630

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.8%

JSON

Related for CVE-2011-5274

cvelist1 prion1 ubuntucve1