Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information.

PEAR Security Advisory reports :

Multiple remote arbitrary command injections have been found in the Net_Ping and Net_Traceroute.

When input from forms are used directly, the attacker could pass variables that would allow him to execute remote arbitrary command injections.

The remote host is affected by the vulnerability described in GLSA-200911-06 (PEAR Net_Traceroute: Command injection)

    Pasquale Imperato reported that the $host parameter to the traceroute()     function in Traceroute.php is not properly sanitized before being     passed to exec().
  Impact :

    A remote attacker could exploit this vulnerability when user input is     passed directly to PEAR Net_Traceroute in a PHP script, possibly     resulting in the remote execution of arbitrary shell commands with the     privileges of the user running the affected PHP script.
  Workaround :

    Ensure that all data that is passed to the traceroute() function is     properly shell escaped (for instance using the escapeshellcmd()     function).

Upstream changelog: QA Release: * Prevent command injection [kguest] (CVE-2009-4025)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
43626	FreeBSD : PEAR -- Net_Ping and Net_Traceroute remote arbitrary command injection (56ba8728-f987-11de-b28d-00215c6a37bb)	Nessus	FreeBSD Local Security Checks	critical
42916	GLSA-200911-06 : PEAR Net_Traceroute: Command injection	Nessus	Gentoo Local Security Checks	critical
42908	Fedora 10 : php-pear-Net-Traceroute-0.21.2-1.fc10 (2009-12083)	Nessus	Fedora Local Security Checks	critical
42907	Fedora 11 : php-pear-Net-Traceroute-0.21.2-1.fc11 (2009-11617)	Nessus	Fedora Local Security Checks	critical
42905	Fedora 12 : php-pear-Net-Traceroute-0.21.2-1.fc12 (2009-11551)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2009-4025

critical

Tenable Plugins

critical

critical

critical

critical

critical