« Volver al listado

CVE-2009-4230

Estado: ModificadaAlta (7.5)—

Múltiples desbordamientos de búfer basados en src/Task.cc en el programa FastCGI en IIPImage Server anterior v0.9.8 permitiría a atacantes remotos ejecutar código de su elección a través de vectores asociados con argumentos manipulados en la función(1) RGN::run, (2) JTLS::run, o (3) SHD::run. NOTA: algunos de estos detalles se han obtenido de información de terceros.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Ruven Pillay — Iipimage Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-4230",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-12-08T19:30:00.267",
  "references": [
    {
      "url": "http://freshmeat.net/projects/iipimage/releases/309013",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://iipimage.sourceforge.net/blog/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/37565",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://freshmeat.net/projects/iipimage/releases/309013",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://iipimage.sourceforge.net/blog/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/37565",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to execute arbitrary code via vectors associated with crafted arguments to the (1) RGN::run, (2) JTLS::run, or (3) SHD::run function.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer basados en src/Task.cc en el programa FastCGI en IIPImage Server anterior v0.9.8 permitiría a atacantes remotos ejecutar código de su elección a través de vectores asociados con argumentos manipulados en  la función(1) RGN::run, (2) JTLS::run, o (3) SHD::run. NOTA: algunos de estos detalles se han obtenido de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T23:13:17.267",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47D307F5-C6BC-4D6D-8546-7B275520E634",
              "versionEndIncluding": "0.9.7"
            },
            {
              "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:0.9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8210940-1F95-4ABC-AF37-23BEADBB1A98"
            },
            {
              "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:0.9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5153FFE6-3D23-44BB-8A56-0E30234DA905"
            },
            {
              "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:0.9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EEA88E2-B935-4AED-8B46-27E24BBD2D4E"
            },
            {
              "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:0.9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7718644-6DF4-455C-996A-D5B7CC96BC2A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}