CVE-2009-1525

HighCVSS 8.5/10Last modified Jun 16, 2026

Description

CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action.

Metrics

CVSS 2.0 8.5/10AV:N/AC:M/Au:S/C:C/I:C/A:C

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.htmlBroken Link, Exploit
http://osvdb.org/54015Broken Link
http://secunia.com/advisories/34861Vendor Advisory
http://www.directadmin.com/features.php?id=968Release Notes, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50167Third Party Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.htmlBroken Link, Exploit
http://osvdb.org/54015Broken Link
http://secunia.com/advisories/34861Vendor Advisory
http://www.directadmin.com/features.php?id=968Release Notes, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50167Third Party Advisory

Timeline

Published: May 5, 2009
Last modified: Jun 16, 2026
NVD status: Analyzed

Related CVEs from 2009

CVE-2009-15266.9JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a cer CVE-2009-15276.9Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges CVE-2009-15289.3Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Serve CVE-2009-15298.1Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 d CVE-2009-15309.3Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and CVE-2009-15319.3Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 a CVE-2009-15328.8Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 d CVE-2009-15339.3Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, CVE-2009-15349.3Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Compo CVE-2009-15357.5The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mec CVE-2009-15362.6ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not prope CVE-2009-15378.8Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows