PT-2009-3025 · Citadel.Org · Webcit

Wilfried Goesgens · Publicado 2009-03-24 · Atualizado 2009-04-02 · CVE-2009-0364

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citadel.org WebCit versions 7.22 through 7.38

Description A format string issue in the mini calendar component allows remote attackers to execute arbitrary code.

Recommendations For versions 7.22 through 7.38, update to version 7.39 or later to resolve the issue.

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2009-0364

DSA-1752-1

Produtos afetados

Webcit

Referências · 7

• http://debian.org/security/2009/dsa-1752 · Aviso do Fabricante
• http://citadel.org/doku.php/news:webcit.security.advisory.-.2009-march-23 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2009-0364 · Aviso do Fabricante
• http://securityfocus.com/bid/34206 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-0364 · Nota de Segurança
• http://secunia.com/advisories/34457 · Nota
• http://osvdb.org/52915 · Nota