CVE-2009-3233 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.2 UNKNOWN	LOCAL	LOW		AV:L/AC:L/Au:N/C:C/I:C/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 44%

Affected Products (NVD)

Vendor	Product	Version
cameron_morland	changetrack	4.3

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

changetrack

bookworm	4.7-8 fixed
bullseye	4.7-8 fixed
sid	4.7-8 fixed
trixie	4.7-8 fixed

Ubuntu Releases

Ubuntu Product

Codename

changetrack

dapper	ignored
hardy	Fixed 4.3-3+lenny1build0.8.04.1 released
intrepid	Fixed 4.3-3+lenny1build0.8.10.1 released
jaunty	Fixed 4.3-3+lenny1build0.9.04.1 released
karmic	not-affected

Known Exploits!

Common Weakness Enumeration

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References

http://bugs.debian.org/546791

http://secunia.com/advisories/36756

http://www.openwall.com/lists/oss-security/2009/09/16/3

http://www.securityfocus.com/bid/36420

http://bugs.debian.org/546791

http://secunia.com/advisories/36756

http://www.openwall.com/lists/oss-security/2009/09/16/3

http://www.securityfocus.com/bid/36420