CVE-2009-3635

NameCVE-2009-3635
DescriptionThe Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential.
SourceCVE (at NVD; LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-1926-1
NVD severitymedium (attack range: remote)
Debian Bugs552020

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
typo3-src (PTS)wheezy (security)4.5.19+dfsg1-5+wheezy4fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
typo3-srcsource(unstable)4.2.10-1medium552020
typo3-srcsourceetch4.0.2+debian-9mediumDSA-1926-1
typo3-srcsourcelenny4.2.5-1+lenny2mediumDSA-1926-1

Search for package or bug name: Reporting problems