Lucene search
HistoryJan 22, 2009 - 11:30 p.m.
CVE-2009-0258
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.8%
The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer.
Affected configurations
Node
typo3typo3Match4.0
ORtypo3typo3Match4.0.1
ORtypo3typo3Match4.0.2
ORtypo3typo3Match4.0.3
ORtypo3typo3Match4.0.4
ORtypo3typo3Match4.0.5
ORtypo3typo3Match4.0.6
ORtypo3typo3Match4.0.7
ORtypo3typo3Match4.0.8
ORtypo3typo3Match4.0.9
ORtypo3typo3Match4.1.0
ORtypo3typo3Match4.1.0beta1
ORtypo3typo3Match4.1.0rc1
ORtypo3typo3Match4.1.1
ORtypo3typo3Match4.1.2
ORtypo3typo3Match4.1.3
ORtypo3typo3Match4.1.4
ORtypo3typo3Match4.1.5
ORtypo3typo3Match4.1.6
ORtypo3typo3Match4.1.7
ORtypo3typo3Match4.2.0
ORtypo3typo3Match4.2.1
ORtypo3typo3Match4.2.2
ORtypo3typo3Match4.2.3
Related
ubuntucve
ubuntucve
CVE-2009-0258
2009-01-22 00:00:00
prion
prion
Command injection
2009-01-22 23:30:00
osv
osv
typo3-src - remote code execution
2009-01-26 00:00:00
cve
cve
CVE-2009-0258
2009-01-22 23:30:04
github
github
cvelist
cvelist
CVE-2009-0258
2009-01-22 23:00:00
nessus
nessus
FreeBSD : typo3 -- multiple vulnerabilities (653606e9-f6ac-11dd-94d9-0030843d3802)
2009-02-09 00:00:00
Debian DSA-1711-1 : typo3-src - several vulnerabilities
2009-01-27 00:00:00
openvas
openvas
TYPO3 Multiple Vulnerabilities (Jan 2009)
2013-12-26 00:00:00
FreeBSD Ports: typo3
2009-02-13 00:00:00
FreeBSD Ports: typo3
2009-02-13 00:00:00
debian
debian
[SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution
2009-01-26 20:54:10
freebsd
freebsd
typo3 -- multiple vulnerabilities
2009-02-07 00:00:00
securityvulns
securityvulns
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.8%
Related for NVD:CVE-2009-0258