CVE

Id
27895  
CVE No.
CVE-2007-4538  
Status
Candidate  
Description
email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.  
Phase
Assigned (20070827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287739 27895 CVE-2007-4538 BUGTRAQ:20070823 Security Advisory for Bugzilla 3.0, 2.22.1, and 2.20.4  View
287740 27895 CVE-2007-4538 URL:http://www.securityfocus.com/archive/1/archive/1/477630/100/0/threaded  View
287741 27895 CVE-2007-4538 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=386860  View
287742 27895 CVE-2007-4538 CONFIRM:http://www.bugzilla.org/security/2.20.4/  View
287743 27895 CVE-2007-4538 GENTOO:GLSA-200709-18  View
287744 27895 CVE-2007-4538 URL:http://security.gentoo.org/glsa/glsa-200709-18.xml  View
287745 27895 CVE-2007-4538 BID:25425  View
287746 27895 CVE-2007-4538 URL:http://www.securityfocus.com/bid/25425  View
287747 27895 CVE-2007-4538 VUPEN:ADV-2007-2977  View
287748 27895 CVE-2007-4538 URL:http://www.vupen.com/english/advisories/2007/2977  View
287749 27895 CVE-2007-4538 OSVDB:37203  View
287750 27895 CVE-2007-4538 URL:http://osvdb.org/37203  View
287751 27895 CVE-2007-4538 SECTRACK:1018604  View
287752 27895 CVE-2007-4538 URL:http://www.securitytracker.com/id?1018604  View
287753 27895 CVE-2007-4538 SECUNIA:26584  View
287754 27895 CVE-2007-4538 URL:http://secunia.com/advisories/26584  View
287755 27895 CVE-2007-4538 SECUNIA:26971  View
287756 27895 CVE-2007-4538 URL:http://secunia.com/advisories/26971  View
287757 27895 CVE-2007-4538 XF:bugzilla-sendmail-command-execution(36243)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55640 JVNDB-2007-004332 Olate Download (od) の download.php における SQL インジェクションの脆弱性 Olate Download (od) の download.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-4540 27895 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004332.html  View