Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-86wq-gv4v-p8jq

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.

EPSS

Процентиль: 61%
0.01034
Низкий

7.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 8 лет назад

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.

CVSS3: 4.1
redhat
почти 8 лет назад

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.

CVSS3: 7.8
nvd
почти 8 лет назад

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.

CVSS3: 7.8
debian
почти 8 лет назад

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() i ...

suse-cvrf
почти 8 лет назад

Security update for mgetty

EPSS

Процентиль: 61%
0.01034
Низкий

7.8 High

CVSS3

Дефекты

CWE-78