CVE-2009-4025

no score yetEPSS 6.1%

Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information.

EPSS: 6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2009-11-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

pear:pear

References

http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/
http://osvdb.org/60515
http://pear.php.net/advisory20091114-01.txt
http://pear.php.net/package/Net_Traceroute/download/0.21.2
http://secunia.com/advisories/37497

Check your stack JSON