Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2009-4417

The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."

  • Published: Dec 24, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-4417
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
zend / framework 0.9.0-beta 0.9.0-beta.x
zend / framework 1.7.3 1.7.3.x
zend / framework 1.9.0-beta_1 1.9.0-beta_1.x
zend / framework 1.9.2 1.9.2.x
zend / framework 1.7.5 1.7.5.x
zend / framework 1.0.0 1.0.0.x
zend / framework 0.1.3-preview 0.1.3-preview.x
zend / framework 1.5.2 1.5.2.x
zend / framework 0.9.1-beta 0.9.1-beta.x
zend / framework 0.8.0-preview 0.8.0-preview.x
zend / framework 1.9.0-alpha_1 1.9.0-alpha_1.x
zend / framework 1.0.0-rc1 1.0.0-rc1.x
zend / framework 1.5.1 1.5.1.x
zend / framework 1.7.7 1.7.7.x
zend / framework 1.0.1 1.0.1.x
zend / framework 1.5.3 1.5.3.x
zend / framework 1.9 1.9.x
zend / framework 1.7.2 1.7.2.x
zend / framework 1.7.8 1.7.8.x
zend / framework 0.1.5-preview 0.1.5-preview.x
zend / framework - 1.9.6.x
zend / framework 1.0.0-rc3 1.0.0-rc3.x
zend / framework 1.9.0-rc1 1.9.0-rc1.x
zend / framework 1.5.0 1.5.0.x
zend / framework 1.7.1 1.7.1.x
zend / framework 1.5.0-rc1 1.5.0-rc1.x
zend / framework 1.8.0-alpha_1 1.8.0-alpha_1.x
zend / framework 1.0.0-rc2 1.0.0-rc2.x
zend / framework 1.7.0 1.7.0.x
zend / framework 1.6.0-rc3 1.6.0-rc3.x
zend / framework 1.6.2 1.6.2.x
zend / framework 1.8.3 1.8.3.x
zend / framework 1.6.0-rc2 1.6.0-rc2.x
zend / framework 1.5.0-rc2 1.5.0-rc2.x
zend / framework 1.9.5 1.9.5.x
zend / framework 1.5.0-rc3 1.5.0-rc3.x
zend / framework 1.8.2 1.8.2.x
zend / framework 1.8.0-beta_1 1.8.0-beta_1.x
zend / framework 1.8.0 1.8.0.x
zend / framework 1.6.1 1.6.1.x
zend / framework 1.0.2 1.0.2.x
zend / framework 1.7.0-preview 1.7.0-preview.x
zend / framework 1.7.6 1.7.6.x
zend / framework 1.9.1 1.9.1.x
zend / framework 1.0.4 1.0.4.x
zend / framework 0.9.2-beta 0.9.2-beta.x
zend / framework 1.9.0 1.9.0.x
zend / framework 0.9.3-beta 0.9.3-beta.x
zend / framework 1.6.0 1.6.0.x
zend / framework 1.8.1 1.8.1.x
zend / framework 1.7.4 1.7.4.x
zend / framework 0.6.0-preview 0.6.0-preview.x
zend / framework 1.9.3 1.9.3.x
zend / framework 0.1.4-preview 0.1.4-preview.x
zend / framework 0.2.0-preview 0.2.0-preview.x
zend / framework 1.9.4 1.9.4.x
zend / framework 1.6.0-rc1 1.6.0-rc1.x
zend / framework 1.8.4 1.8.4.x
zend / framework 0.7.0-preview 0.7.0-preview.x
zend / framework 1.0.3 1.0.3.x
zend / framework 1.5.0-preview 1.5.0-preview.x