Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-1132

Опубликовано: 27 мар. 2010
Источник: nvd
CVSS2: 9.3
EPSS Средний

Описание

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:georg_greve:spamassassin_milter_plugin:0.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 95%
0.20316
Средний

9.3 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

ubuntu
больше 15 лет назад

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.

redhat
почти 16 лет назад

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.

debian
больше 15 лет назад

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter ...

github
больше 3 лет назад

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.

EPSS

Процентиль: 95%
0.20316
Средний

9.3 Critical

CVSS2

Дефекты

CWE-78