CVE-2005-4154

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-11 · updated 2026-06-16

Description

Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.

Affected products

php Pear: through 1.4.2; 0.9, 0.10, 0.11, 0.90, 1.0, 1.0.1 (+14)

References

http://pear.php.net/advisory-20051104.txt
http://secunia.com/advisories/17563/
http://securitytracker.com/alerts/2005/Nov/1015161.html
http://www.vupen.com/english/advisories/2005/2444
https://exchange.xforce.ibmcloud.com/vulnerabilities/23021
http://pear.php.net/advisory-20051104.txt
http://secunia.com/advisories/17563/
http://securitytracker.com/alerts/2005/Nov/1015161.html
http://www.vupen.com/english/advisories/2005/2444
https://exchange.xforce.ibmcloud.com/vulnerabilities/23021

Get alerted when CVE-2005-4154 or the next vulnerability affects your stack