Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2509
HistoryMay 09, 2007 - 12:00 a.m.

CVE-2007-2509

2007-05-0900:00:00
ubuntu.com
ubuntu.com
15

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.025 Low

EPSS

Percentile

90.0%

CRLF injection vulnerability in the ftp_putcmd function in PHP before
4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP
commands via CRLF sequences in the parameters to earlier FTP commands.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchphp5< 5.1.2-1ubuntu3.9UNKNOWN
ubuntu6.10noarchphp5< 5.1.6-1ubuntu2.6UNKNOWN
ubuntu7.04noarchphp5< 5.2.1-0ubuntu1.4UNKNOWN

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.025 Low

EPSS

Percentile

90.0%