Home > Vulnerability Database > CVE-2007-2509

Mend.io Vulnerability Database

CVE-2007-2509

Date: May 8, 2007

CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.

Severity Score

3.7

Related Resources (39)

Url: http://www.securitytracker.com/id?1018022

Url: http://www.ubuntu.com/usn/usn-462-1

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2007-2509

Url: http://www.redhat.com/support/errata/RHSA-2007-0349.html

Url: https://rhn.redhat.com/errata/RHSA-2007-0348.html

Url: http://www.redhat.com/support/errata/RHSA-2007-0888.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-2509

Url: http://www.trustix.org/errata/2007/0017/

Url: http://secunia.com/advisories/26967

Url: http://secunia.com/advisories/25318

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10839

Url: http://rhn.redhat.com/errata/RHSA-2007-0889.html

Url: http://securityreason.com/securityalert/2672

Url: http://secunia.com/advisories/25255

Url: http://secunia.com/advisories/26048

Url: http://secunia.com/advisories/25191

Url: http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html

Url: http://secunia.com/advisories/27351

Url: http://secunia.com/advisories/25372

Url: http://www.vupen.com/english/advisories/2007/2187

Url: http://www.securityfocus.com/bid/23818

Url: http://us2.php.net/releases/4_4_7.php

Url: http://www.securityfocus.com/bid/23813

Url: http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:103

Url: http://www.debian.org/security/2007/dsa-1296

Url: http://www.debian.org/security/2007/dsa-1295

Url: http://us2.php.net/releases/5_2_2.php

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:102

Url: http://www.securityfocus.com/archive/1/463596/100/0/threaded

Url: http://secunia.com/advisories/25365

Url: https://access.redhat.com/security/cve/CVE-2007-2509

Url: http://secunia.com/advisories/25660

Url: http://secunia.com/advisories/25187

Url: http://www.redhat.com/support/errata/RHSA-2007-0355.html

Url: http://security.gentoo.org/glsa/glsa-200705-19.xml

Url: http://secunia.com/advisories/25445

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/34413

Url: https://www.mend.io/vulnerability-database/CVE-2007-2509

Severity Score

3.7

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	2.6
Access Vector (AV):	NETWORK
Access Complexity (AC):	HIGH
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2007-2509

Date: May 8, 2007

Severity Score

Related Resources (39)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?