CVE-2004-2284

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument.

Ссылки

http://openwebmail.org/openwebmail/download/cert/advisories/SA-04:04.txt
Patch
Vendor Advisory
http://secunia.com/advisories/12017
Patch
Vendor Advisory
http://securitytracker.com/id?1010605
Patch
http://www.osvdb.org/7474
Patch
http://www.securityfocus.com/bid/10637
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16549
http://openwebmail.org/openwebmail/download/cert/advisories/SA-04:04.txt
Patch
Vendor Advisory
http://secunia.com/advisories/12017
Patch
Vendor Advisory
http://securitytracker.com/id?1010605
Patch
http://www.osvdb.org/7474
Patch
http://www.securityfocus.com/bid/10637
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16549

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:1.8:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:1.81:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:1.90:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:2.20:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:2.21:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*

cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04167

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-3m4j-hh92-238g

github

почти 4 года назад