CVE-2005-4154 Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or....
MediumCVSS 5.1
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php pear | <= 1.4.2 | No fix listed |
| php pear | = 0.9 | No fix listed |
| php pear | = 0.10 | No fix listed |
| php pear | = 0.11 | No fix listed |
| php pear | = 0.90 | No fix listed |
| php pear | = 1.0 | No fix listed |
| php pear | = 1.0.1 | No fix listed |
| php pear | = 1.1 | No fix listed |
| php pear | = 1.2 | No fix listed |
| php pear | = 1.2.1 | No fix listed |
| php pear | = 1.3 | No fix listed |
| php pear | = 1.3.1 | No fix listed |
| php pear | = 1.3.3 | No fix listed |
| php pear | = 1.3.3.1 | No fix listed |
| php pear | = 1.3.4 | No fix listed |
| php pear | = 1.3.5 | No fix listed |
| php pear | = 1.3.6 | No fix listed |
| php pear | = 1.4.0 | No fix listed |
| php pear | = 1.4.0-rc1 | No fix listed |
| php pear | = 1.4.0-rc2 | No fix listed |
| php pear | = 1.4.1 | No fix listed |
References
- pear.php.net patch vendor-advisory
- 17563 patch third-party-advisory vendor-advisory
- 1015161 patch vdb-entry
- ADV-2005-2444 vdb-entry vendor-advisory
- pear-installer-code-execution(23021) vdb-entry