CVE-2005-1921: debian debian_linux Code Injection

CVSS: 7.5v2.0HighModified

AliasesDSA-746-1DSA-747-1

Published 01-07-2005Last modified 07-08-2024

Vulnerability summary

CVE-2005-1921 is a high (CVSS 7.5) Code Injection vulnerability in debian debian_linux. EPSS estimates a 79.07% chance of exploitation in the next 30 days, higher than 99.5% of scored vulnerabilities. 6 public exploits are recorded.

Overall risk

56/100

0100

High · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

79.07%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits6exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 4 · Duplicates 1

DSA-745-1 DSA-789-1 DTSA-15-1 RHSA-2005:564 CVE-2005-2116

Timeline

01-07-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

79.07%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 79.07% on 18-09-2026

18-09-202618-10-2026

EPSS score

79.07%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

6 found

exploit-databasephpUnverified
PHPXMLRPC < 1.1 - Remote Code Execution
Maturity: poc
exploit-databasephpVerified
XML-RPC Library 1.3.0 - 'xmlrpc.php' Arbitrary Code Execution (Metasploit)
Maturity: poc
exploit-databasephpVerified
XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Code Injection
Maturity: poc

Show all 6 exploits

exploit-databasephpVerified
XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (2)
Maturity: poc
exploit-databasephpVerified
XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (3)
Maturity: poc
MetasploitremoteVerified
PHP XML-RPC Arbitrary Code Execution
exploit/unix/webapp/php_xmlrpc_eval
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected systems

Debian3 products

egroupware< 1.0.0.007-2.dfsg-2sarge1
phpgroupwareAll versions (No fix recorded) | < 0.9.16.005-3.sarge0
debian_linuxEOL3.1

Drupal1 product

drupal< 4.5.4 | ≥ 4.6.0, < 4.6.2

Gggeek1 product

phpxmlrpc≤ 1.1

Php1 product

xml_rpc≤ 1.3.0

Tiki1 product

tikiwiki_cms\/groupware< 1.8.5

5 vendors · 7 products

References

50 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A350VDB EntrySignatureX Refsource OVALBroken Link
www.debian.org/security/2005/dsa-789Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
secunia.com/advisories/15947Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15852Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15944Third Party AdvisoryX Refsource SECUNIABroken Link
www.novell.com/linux/security/advisories/2005_18_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/15883Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15872Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15895Third Party AdvisoryX Refsource SECUNIABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294VDB EntrySignatureX Refsource OVALBroken Link

Show all 50 references

securitytracker.com/id?1015336VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
www.debian.org/security/2005/dsa-746Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
secunia.com/advisories/17674Third Party AdvisoryX Refsource SECUNIABroken Link
www.gulftech.org?node=research&article_id=00087-07012005X Refsource MISCNot ApplicableVendor Advisory
www.vupen.com/english/advisories/2005/2827VDB EntryX Refsource VUPENBroken Link
secunia.com/advisories/15917Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2005/dsa-747Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
www.novell.com/linux/security/advisories/2005_41_php_pear.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.hardened-php.net/advisory-022005.phpX Refsource MISCNot Applicable
www.securityfocus.com/archive/1/419064/100/0/threadedVendor AdvisoryX Refsource HPBroken LinkThird Party AdvisoryVDB Entry
marc.info?l=bugtraq&m=112605112027335&w=2Vendor AdvisoryX Refsource SUSEThird Party Advisory
secunia.com/advisories/15957Third Party AdvisoryX Refsource SECUNIABroken Link
www.ampache.org/announce/3_3_1_2.phpX Refsource CONFIRMBroken Link
secunia.com/advisories/15810Third Party AdvisoryX Refsource SECUNIABroken Link
security.gentoo.org/glsa/glsa-200507-01.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.drupal.org/security/drupal-sa-2005-003/advisory.txtX Refsource CONFIRMThird Party Advisory
www.securityfocus.com/bid/14088VDB EntryX Refsource BIDBroken LinkThird Party Advisory
secunia.com/advisories/16693Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=112008638320145&w=2Mailing ListX Refsource BUGTRAQThird Party Advisory
marc.info?l=bugtraq&m=112015336720867&w=2Mailing ListX Refsource BUGTRAQThird Party Advisory
security.gentoo.org/glsa/glsa-200507-07.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/15904Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15903Third Party AdvisoryX Refsource SECUNIABroken Link
www.novell.com/linux/security/advisories/2005_49_php.htmlVendor AdvisoryX Refsource SUSEBroken Link
sourceforge.net/project/shownotes.php?release_id=338803X Refsource CONFIRMBroken Link
secunia.com/advisories/17440Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15922Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15884Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15916Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2005-564.htmlVendor AdvisoryX Refsource REDHATBroken Link
pear.php.net/package/XML_RPC/download/1.3.1X Refsource MISCPatchProduct
secunia.com/advisories/16001Third Party AdvisoryX Refsource SECUNIABroken Link
sourceforge.net/project/showfiles.php?group_id=87163X Refsource CONFIRMProduct
www.mandriva.com/security/advisories?name=MDKSA-2005:109Vendor AdvisoryX Refsource MANDRAKEPatchThird Party Advisory
security.gentoo.org/glsa/glsa-200507-06.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.debian.org/security/2005/dsa-745Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
secunia.com/advisories/15855Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/16339Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/18003Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/15861Third Party AdvisoryX Refsource SECUNIABroken Link

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities