CVE-2016-10034

Опубликовано: 30 дек. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Высокий

Описание

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " (backslash double quote) in a crafted e-mail address.

Ссылки

http://www.securityfocus.com/bid/95144
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037539
https://framework.zend.com/security/advisory/ZF2016-04
Exploit
Technical Description
Vendor Advisory
https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.html
Exploit
Technical Description
Third Party Advisory
https://security.gentoo.org/glsa/201804-10
https://www.exploit-db.com/exploits/40979/
https://www.exploit-db.com/exploits/40986/
https://www.exploit-db.com/exploits/42221/
http://www.securityfocus.com/bid/95144
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037539
https://framework.zend.com/security/advisory/ZF2016-04
Exploit
Technical Description
Vendor Advisory
https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.html
Exploit
Technical Description
Third Party Advisory
https://security.gentoo.org/glsa/201804-10
https://www.exploit-db.com/exploits/40979/
https://www.exploit-db.com/exploits/40986/
https://www.exploit-db.com/exploits/42221/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*

Версия до 2.4.10 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:zend:zend-mail:*:*:*:*:*:*:*:*

Версия до 2.4.10 (включая)

cpe:2.3:a:zend:zend-mail:2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:zend:zend-mail:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:zend:zend-mail:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:zend:zend-mail:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:zend:zend-mail:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:zend:zend-mail:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:zend:zend-mail:2.7.0:*:*:*:*:*:*:*

cpe:2.3:a:zend:zend-mail:2.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.82322

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-77

Связанные уязвимости

CVE-2016-10034

CVSS3: 9.8

ubuntu

около 9 лет назад

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.

CVE-2016-10034

CVSS3: 9.8

debian

около 9 лет назад

The setFrom function in the Sendmail adapter in the zend-mail componen ...

GHSA-r9mw-gwx9-v3h5

CVSS3: 9.8

github

больше 3 лет назад

zend-mail remote code execution via Sendmail adapter

EPSS

Процентиль: 99%

0.82322

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-77