CVE-2005-2498 Code injection in n/a
Remote attackers can execute arbitrary PHP code via nested XML tags in PHPXMLRPC, affecting multiple applications using this library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-2498?
CVE-2005-2498 is a high-severity code injection vulnerability in Debian Debian Linux, published on 15 Aug 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.
Weakness: CWE-94
Which versions are affected by CVE-2005-2498?
It affects 2 products.
Linux distribution packages (40)
php Red Hat:enterprise_linux:3::as | All versions | 0:4.3.2-25.ent |
php-debuginfo Red Hat:enterprise_linux:3::as | All versions | 0:4.3.2-25.ent |
php-devel Red Hat:enterprise_linux:3::as | All versions | 0:4.3.2-25.ent |
php-imap Red Hat:enterprise_linux:3::as | All versions | 0:4.3.2-25.ent |
php-ldap Red Hat:enterprise_linux:3::as | All versions | 0:4.3.2-25.ent |
php-mysql Red Hat:enterprise_linux:3::as | All versions | 0:4.3.2-25.ent |
php-odbc Red Hat:enterprise_linux:3::as | All versions | 0:4.3.2-25.ent |
php-pgsql Red Hat:enterprise_linux:3::as | All versions | 0:4.3.2-25.ent |
php Red Hat:enterprise_linux:3::desktop | All versions | 0:4.3.2-25.ent |
php-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 0:4.3.2-25.ent |
php-devel Red Hat:enterprise_linux:3::desktop | All versions | 0:4.3.2-25.ent |
php-imap Red Hat:enterprise_linux:3::desktop | All versions | 0:4.3.2-25.ent |
php-ldap Red Hat:enterprise_linux:3::desktop | All versions | 0:4.3.2-25.ent |
php-mysql Red Hat:enterprise_linux:3::desktop | All versions | 0:4.3.2-25.ent |
php-odbc Red Hat:enterprise_linux:3::desktop | All versions | 0:4.3.2-25.ent |
php-pgsql Red Hat:enterprise_linux:3::desktop | All versions | 0:4.3.2-25.ent |
php Red Hat:enterprise_linux:3::es | All versions | 0:4.3.2-25.ent |
php-debuginfo Red Hat:enterprise_linux:3::es | All versions | 0:4.3.2-25.ent |
php-devel Red Hat:enterprise_linux:3::es | All versions | 0:4.3.2-25.ent |
php-imap Red Hat:enterprise_linux:3::es | All versions | 0:4.3.2-25.ent |
php-ldap Red Hat:enterprise_linux:3::es | All versions | 0:4.3.2-25.ent |
php-mysql Red Hat:enterprise_linux:3::es | All versions | 0:4.3.2-25.ent |
php-odbc Red Hat:enterprise_linux:3::es | All versions | 0:4.3.2-25.ent |
php-pgsql Red Hat:enterprise_linux:3::es | All versions | 0:4.3.2-25.ent |
php Red Hat:enterprise_linux:3::ws | All versions | 0:4.3.2-25.ent |
php-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 0:4.3.2-25.ent |
php-devel Red Hat:enterprise_linux:3::ws | All versions | 0:4.3.2-25.ent |
php-imap Red Hat:enterprise_linux:3::ws | All versions | 0:4.3.2-25.ent |
php-ldap Red Hat:enterprise_linux:3::ws | All versions | 0:4.3.2-25.ent |
php-mysql Red Hat:enterprise_linux:3::ws | All versions | 0:4.3.2-25.ent |
php-odbc Red Hat:enterprise_linux:3::ws | All versions | 0:4.3.2-25.ent |
php-pgsql Red Hat:enterprise_linux:3::ws | All versions | 0:4.3.2-25.ent |
php Red Hat:enterprise_linux:4::as | All versions | 0:4.3.9-3.8 |
php-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:4.3.9-3.8 |
php-devel Red Hat:enterprise_linux:4::as | All versions | 0:4.3.9-3.8 |
php-domxml Red Hat:enterprise_linux:4::as | All versions | 0:4.3.9-3.8 |
php-gd Red Hat:enterprise_linux:4::as | All versions | 0:4.3.9-3.8 |
php-imap Red Hat:enterprise_linux:4::as | All versions | 0:4.3.9-3.8 |
php-ldap Red Hat:enterprise_linux:4::as | All versions | 0:4.3.9-3.8 |
php-mbstring Red Hat:enterprise_linux:4::as | All versions | 0:4.3.9-3.8 |
Products include Debian Debian Linux, Gggeek Phpxmlrpc.
How do I fix CVE-2005-2498?
Upgrade to a fixed version.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2005-2498 being exploited?
There is no known exploitation of CVE-2005-2498 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DSA-840-1, DSA-842-1, GHSA-mcp5-3g3r-5wm5, RHSA-2005:748.