CVE-2009-0918

Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes launched by PTK's Apache HTTP Server via (1) "external tools" or (2) a crafted forensic image.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
dflabsptk
1.0.0
dflabsptk
1.0.1
dflabsptk
1.0.2
dflabsptk
1.0.3
dflabsptk
1.0.4
𝑥
= Vulnerable software versions
References
http://ptk.dflabs.com/faq.html
http://ptk.dflabs.com/security.html
http://www.kb.cert.org/vuls/id/845747
http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ
http://www.securityfocus.com/bid/34111
https://exchange.xforce.ibmcloud.com/vulnerabilities/49235
http://ptk.dflabs.com/faq.html
http://ptk.dflabs.com/security.html
http://www.kb.cert.org/vuls/id/845747
http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ
http://www.securityfocus.com/bid/34111
https://exchange.xforce.ibmcloud.com/vulnerabilities/49235