← Database

CVE-2009-3102

CRITICAL CVSS: 10.0 Published: 2009-09-08 Modified: 2026-06-16

Description

The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_BINPATH variable.

Affected Platforms

Zmanda Zrm For My Sql

Weakness Type

CWE-20

References