CVE-2009-1669

2009-05-1800:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.6%

JSON

The smarty_function_math function in libs/plugins/function.math.php in
Smarty 2.6.22 allows context-dependent attackers to execute arbitrary
commands via shell metacharacters in the equation attribute of the math
function. NOTE: some of these details are obtained from third party
information.

Notes

Author	Note
mdeslaur	may be a PoC here: http://www.milw0rm.com/exploits/8659 Debian says: TODO: check. It should be windows specific.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmoodle< 1.8.2-1ubuntu4.2UNKNOWN
ubuntu8.10noarchmoodle< 1.8.2-1.2ubuntu2.1UNKNOWN
ubuntu9.04noarchsmarty< 2.6.22-1ubuntu1.1UNKNOWN
ubuntu9.10noarchsmarty< 2.6.22-1ubuntu2UNKNOWN
ubuntu10.04noarchsmarty< 2.6.22-1ubuntu2UNKNOWN
ubuntu10.10noarchsmarty< 2.6.22-1ubuntu2UNKNOWN
ubuntu11.04noarchsmarty< 2.6.22-1ubuntu2UNKNOWN
ubuntu11.10noarchsmarty< 2.6.22-1ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	moodle	< 1.8.2-1ubuntu4.2	UNKNOWN
ubuntu	8.10	noarch	moodle	< 1.8.2-1.2ubuntu2.1	UNKNOWN
ubuntu	9.04	noarch	smarty	< 2.6.22-1ubuntu1.1	UNKNOWN
ubuntu	9.10	noarch	smarty	< 2.6.22-1ubuntu2	UNKNOWN
ubuntu	10.04	noarch	smarty	< 2.6.22-1ubuntu2	UNKNOWN
ubuntu	10.10	noarch	smarty	< 2.6.22-1ubuntu2	UNKNOWN
ubuntu	11.04	noarch	smarty	< 2.6.22-1ubuntu2	UNKNOWN
ubuntu	11.10	noarch	smarty	< 2.6.22-1ubuntu2	UNKNOWN