CVE-2009-0258
- State
- Published
- Severity
- Not scored
- Published
- Jan 22, 2009
- Updated
- Aug 7, 2024
- Reserved
- Jan 22, 2009
Description
The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/
- 33617third-party-advisory
- DSA-1711vendor-advisory
- typo3-indexedsearch-command-execution(48138)vdb-entry
- 33376vdb-entry
- [oss-security] 20090123 Re: CVE id request: typo3 SA-2009-001mailing-list
- 33679third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.