CVEvulnerability

CVE-2010-2060

7.5 HIGH Published 2010-06-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-06-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is too big, which is not properly handled by the dispatch_cmd function in prot.c.

Affected configurations

• wildbit beanstalkd (<= 1.4.5) • wildbit beanstalkd 0.5 • wildbit beanstalkd 0.6 • wildbit beanstalkd 0.7 • wildbit beanstalkd 0.8 • wildbit beanstalkd 0.9 • wildbit beanstalkd 0.10 • wildbit beanstalkd 1.0 • wildbit beanstalkd 1.1 • wildbit beanstalkd 1.2 • wildbit beanstalkd 1.3 • wildbit beanstalkd 1.4 • wildbit beanstalkd 1.4.1 • wildbit beanstalkd 1.4.2 • wildbit beanstalkd 1.4.3 • wildbit beanstalkd 1.4.4

References