CVE-2009-1525

NONE EPSS 82.5%

Published May 5, 200917y ago · Modified Jun 16, 20262w ago

Published May 5, 2009 17y ago

Last Modified Jun 16, 2026 2w ago

Description

CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action.

Threat Intelligence

EPSS Exploit Probability

82.5% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 1

Vendor	Product	Version	Range
directadmin	directadmin	*	<1.33.4

References 5

archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html

Broken LinkExploit
osvdb.org http://osvdb.org/54015

Broken Link
secunia.com http://secunia.com/advisories/34861

Vendor Advisory
directadmin.com http://www.directadmin.com/features.php?id=968

Release NotesVendor Advisory
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/50167

Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.