CVE-2005-2498: debian debian_linux Code Injection

CVSS: 7.5v2.0HighModified

AliasesRHSA-2005:748DSA-840-1DSA-842-1

Published 15-08-2005Last modified 07-08-2024

Vulnerability summary

CVE-2005-2498 is a high (CVSS 7.5) Code Injection vulnerability in debian debian_linux. EPSS estimates a 5.09% chance of exploitation in the next 30 days, higher than 92.2% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

5.09%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3

DSA-789-1 DSA-798-1 DTSA-15-1

Timeline

15-08-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

5.09%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 5.09% on 19-09-2026

19-09-202619-10-2026

EPSS score

5.09%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected systems

Redhat15 products

php< 0:4.3.2-25.ent | < 0:4.3.9-3.8
php-debuginfo< 0:4.3.2-25.ent | < 0:4.3.9-3.8
php-devel< 0:4.3.2-25.ent | < 0:4.3.9-3.8
php-domxml< 0:4.3.9-3.8
php-gd< 0:4.3.9-3.8

Show all 15

Debian3 products

drupal< 4.5.3-4
egroupware< 1.0.0.007-2.dfsg-2sarge2
debian_linuxEOL3.1

Gggeek1 product

phpxmlrpc≤ 1.1.1

3 vendors · 19 products

References

41 links

www.debian.org/security/2005/dsa-789Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
secunia.com/advisories/17066Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/16441Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=112431497300344&w=2Mailing ListX Refsource BUGTRAQThird Party Advisory
secunia.com/advisories/16491Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/16619Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=112412415822890&w=2Mailing ListX Refsource BUGTRAQThird Party Advisory
marc.info?l=bugtraq&m=112605112027335&w=2Vendor AdvisoryX Refsource SUSEThird Party Advisory
secunia.com/advisories/16460Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2005-748.htmlVendor AdvisoryX Refsource REDHATBroken Link

Show all 41 references

www.securityfocus.com/bid/14560VDB EntryX Refsource BIDBroken LinkThird Party Advisory
secunia.com/advisories/16558Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2005/dsa-840Vendor AdvisoryX Refsource DEBIANMailing List
secunia.com/advisories/16431Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/16693Third Party AdvisoryX Refsource SECUNIABroken Link
www.fedoralegacy.org/updates/…Vendor AdvisoryX Refsource FEDORABroken Link
www.novell.com/linux/security/advisories/2005_49_php.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/17440Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/archive/1/408125Mailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
secunia.com/advisories/16976Third Party AdvisoryX Refsource SECUNIABroken Link
www.gentoo.org/security/en/glsa/glsa-200509-19.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/16469Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/16563Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/17053Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2005/dsa-798Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
secunia.com/advisories/16468Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2005/dsa-842Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
secunia.com/advisories/16465Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/16635Third Party AdvisoryX Refsource SECUNIABroken Link
www.hardened-php.net/advisory_152005.67.htmlX Refsource MISCNot ApplicablePatchVendor Advisory
secunia.com/advisories/16432Third Party AdvisoryX Refsource SECUNIABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9569VDB EntrySignatureX Refsource OVALBroken Link
secunia.com/advisories/16550Third Party AdvisoryX Refsource SECUNIABroken Link
access.redhat.com/errata/RHSA-2005:748Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=165846REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_748.jsonAdvisory
access.redhat.com/security/cve/CVE-2005-2498REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617729REPORT
www.cve.org/CVERecord?id=CVE-2005-2498Advisory
nvd.nist.gov/vuln/detail/CVE-2005-2498Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities