CVE-2010-4281: Code Injection
Published Dec 2, 2010
·Updated
Incomplete blacklist vulnerability in the safeurlextraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) character.
Affected Software
16 affected components
Artica Pandora FMS<=3.1
Artica Pandora FMS=1.2
Artica Pandora FMS=1.3
Artica Pandora FMS=1.3-beta
Artica Pandora FMS=1.3-beta1
Artica Pandora FMS=1.3-beta2
Artica Pandora FMS=1.3-beta3
Artica Pandora FMS=1.3.1
Artica Pandora FMS=2.0
Artica Pandora FMS=2.0-beta
Artica Pandora FMS=2.1
Artica Pandora FMS=2.1.1
Artica Pandora FMS=3.0
Artica Pandora FMS=3.0-rc1
Artica Pandora FMS=3.0-rc2
Artica Pandora FMS=3.1-rc1
Remediation
Patch Available
Event History
Dec 2, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4281?
CVE-2010-4281 has a medium severity level, allowing remote attackers to execute arbitrary PHP code.
2
How do I fix CVE-2010-4281?
To fix CVE-2010-4281, upgrade Pandora FMS to version 3.1.1 or later.
3
Which versions of Pandora FMS are affected by CVE-2010-4281?
CVE-2010-4281 affects Pandora FMS versions prior to 3.1.1, including all 1.x and 2.x versions.
4
What vulnerability does CVE-2010-4281 exploit?
CVE-2010-4281 exploits an incomplete blacklist in the safe_url_extraclean function.
5
Can CVE-2010-4281 be exploited without authentication?
Yes, CVE-2010-4281 can be exploited remotely, allowing unauthenticated attackers to execute arbitrary code.