CVE-2009-0258

Published Jan 22, 2009

Last updated 7 years ago

Overview

Description: The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "501A9157-044A-4856-8092-418D7329EED3"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5A13146E-EC04-4354-9123-BC7CB292C66A"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F27B173-8D10-47F7-8450-F8808A918295"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DCCB2DE6-4407-4E40-8574-9C813183565B"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "273F2E33-0655-46DE-9397-E16658B4BD8C"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3B8F7039-4117-4D53-ABE8-99C10518D351"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "96D69530-AE74-4012-B522-01D0B6B01662"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D93919E9-B3E8-483E-A701-D87570127207"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          },
          {
            "criteria": "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References