Unrated severityNVD Advisory· Published Nov 29, 2009· Updated Jun 16, 2026
CVE-2009-4024
CVE-2009-4024
Description
Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: this has also been reported as a shell metacharacter problem.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:pear:pear:*:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:pear:pear:*:*:*:*:*:*:*:*range: <=2.4.4
- cpe:2.3:a:pear:pear:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:2.4:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:pear:pear:2.4.3:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
13- blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/nvdPatch
- pear.php.net/package/Net_Ping/download/2.4.5nvdPatchVendor Advisory
- www.vupen.com/english/advisories/2009/3320nvdPatchVendor Advisory
- pear.php.net/advisory20091114-01.txtnvdVendor Advisory
- secunia.com/advisories/37451nvdVendor Advisory
- secunia.com/advisories/37502nvd
- svn.php.net/viewvc/pear/packages/Net_Ping/trunk/Ping.phpnvd
- www.debian.org/security/2009/dsa-1949nvd
- www.securityfocus.com/bid/37093nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/54390nvd
- www.redhat.com/archives/fedora-package-announce/2009-November/msg01044.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2009-November/msg01130.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2009-November/msg01152.htmlnvd
News mentions
0No linked articles in our index yet.