mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-29 09:41:31 +00:00
277 lines
8.9 KiB
JSON
277 lines
8.9 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2005-1921",
|
||
|
|
"sourceIdentifier": "secalert@redhat.com",
|
||
|
|
"published": "2005-07-05T04:00:00.000",
|
||
|
|
"lastModified": "2018-10-19T15:32:03.347",
|
||
|
|
"vulnStatus": "Modified",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV2": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "2.0",
|
||
|
|
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
|
||
|
|
"accessVector": "NETWORK",
|
||
|
|
"accessComplexity": "LOW",
|
||
|
|
"authentication": "NONE",
|
||
|
|
"confidentialityImpact": "PARTIAL",
|
||
|
|
"integrityImpact": "PARTIAL",
|
||
|
|
"availabilityImpact": "PARTIAL",
|
||
|
|
"baseScore": 7.5
|
||
|
|
},
|
||
|
|
"baseSeverity": "HIGH",
|
||
|
|
"exploitabilityScore": 10.0,
|
||
|
|
"impactScore": 6.4,
|
||
|
|
"acInsufInfo": false,
|
||
|
|
"obtainAllPrivilege": false,
|
||
|
|
"obtainUserPrivilege": false,
|
||
|
|
"obtainOtherPrivilege": true,
|
||
|
|
"userInteractionRequired": false
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "NVD-CWE-Other"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"configurations": [
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.0.2:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "5241665D-61C1-4ECB-A449-43568150CB73"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.0.3:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1D4E772E-76B5-48E3-81EF-B5F3B2B60669"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.0.4:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "D66E0B84-DE95-4306-9CA7-006D168C188B"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.1.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "8C295FC3-469D-48FB-820D-7DAA75D3A9F6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EDF2A7C7-3FC8-4581-B4CB-D80BE1A6D6D6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.0rc1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "69A0E9AE-74F4-4CC8-B137-CECA8F11224F"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.0rc2:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "9FF6E378-4388-43F7-AF85-47855A7F96F5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.0rc3:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "D2590C68-88A0-4921-BB36-129752145BC7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.0rc4:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "97ABEE68-A1A3-4CE3-A117-84275B445675"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.0rc5:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "6E535400-D140-4780-98CB-133142CD390E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.0rc6:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "C6D8566F-8165-4BE5-BA18-7D73FBED62B2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.0rc7:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1C188D7B-377F-4B08-8351-306CD4FB2530"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "06A8377B-CDD9-49C9-B263-FB7FE1228E65"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.2.2:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "370F9F15-10D2-4C67-898E-F95222305599"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.3.0rc1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "4D09F8C0-0A05-48CA-AF29-510E100B743A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.3.0rc2:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "206298B4-ECFE-40F1-9095-4E9BB5865217"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:pear:xml_rpc:1.3.0rc3:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "8CAA1638-A8AC-4589-91F1-F990D3140CCA"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "http://marc.info/?l=bugtraq&m=112008638320145&w=2",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://marc.info/?l=bugtraq&m=112015336720867&w=2",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://marc.info/?l=bugtraq&m=112605112027335&w=2",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://pear.php.net/package/XML_RPC/download/1.3.1",
|
||
|
|
"source": "secalert@redhat.com",
|
||
|
|
"tags": [
|
||
|
|
"Patch"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://security.gentoo.org/glsa/glsa-200507-01.xml",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://security.gentoo.org/glsa/glsa-200507-06.xml",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://security.gentoo.org/glsa/glsa-200507-07.xml",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://securitytracker.com/id?1015336",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://sourceforge.net/project/showfiles.php?group_id=87163",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://sourceforge.net/project/shownotes.php?release_id=338803",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.ampache.org/announce/3_3_1_2.php",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.debian.org/security/2005/dsa-745",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.debian.org/security/2005/dsa-746",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.debian.org/security/2005/dsa-747",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.debian.org/security/2005/dsa-789",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.drupal.org/security/drupal-sa-2005-003/advisory.txt",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.gulftech.org/?node=research&article_id=00087-07012005",
|
||
|
|
"source": "secalert@redhat.com",
|
||
|
|
"tags": [
|
||
|
|
"Patch",
|
||
|
|
"Vendor Advisory"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.hardened-php.net/advisory-022005.php",
|
||
|
|
"source": "secalert@redhat.com",
|
||
|
|
"tags": [
|
||
|
|
"Vendor Advisory"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:109",
|
||
|
|
"source": "secalert@redhat.com",
|
||
|
|
"tags": [
|
||
|
|
"Patch",
|
||
|
|
"Vendor Advisory"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.novell.com/linux/security/advisories/2005_41_php_pear.html",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.novell.com/linux/security/advisories/2005_49_php.html",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2005-564.html",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.securityfocus.com/archive/1/419064/100/0/threaded",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.securityfocus.com/bid/14088",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.vupen.com/english/advisories/2005/2827",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A350",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|