CVE-2005-4154

Published: Dec 11, 2005Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.

Affected (21)

Products: Php: Pear

Php

1 product

Pear

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Php Pear	Up to 1.4.2
Php Pear	Version 0.10
Php Pear	Version 0.11
Php Pear	Version 0.90
Php Pear	Version 0.9
Php Pear	Version 1.0.1
Php Pear	Version 1.0
Php Pear	Version 1.1
Php Pear	Version 1.2.1
Php Pear	Version 1.2
Php Pear	Version 1.3.1
Php Pear	Version 1.3.3.1
Php Pear	Version 1.3.3
Php Pear	Version 1.3.4
Php Pear	Version 1.3.5
Php Pear	Version 1.3.6
Php Pear	Version 1.3
Php Pear	Version 1.4.0
Php Pear	Version 1.4.0 rc1
Php Pear	Version 1.4.0 rc2
Php Pear	Version 1.4.1