CVE

Id
85753  
CVE No.
CVE-2015-8476  
Status
Candidate  
Description
Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the validateAddress function in class.phpmailer.php or (2) SMTP command to the sendCommand function in class.smtp.php, a different vulnerability than CVE-2012-0796.  
Phase
Assigned (20151204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
754993 85753 CVE-2015-8476 MLIST:[oss-security] 20151204 CVE Request: PHPMailer Message Injection Vulnerability  View
754994 85753 CVE-2015-8476 URL:http://www.openwall.com/lists/oss-security/2015/12/04/5  View
754995 85753 CVE-2015-8476 MLIST:[oss-security] 20151204 Re: CVE Request: PHPMailer Message Injection Vulnerability  View
754996 85753 CVE-2015-8476 URL:http://www.openwall.com/lists/oss-security/2015/12/05/1  View
754997 85753 CVE-2015-8476 CONFIRM:https://github.com/PHPMailer/PHPMailer/commit/6687a96a18b8f12148881e4ddde795ae477284b0  View
754998 85753 CVE-2015-8476 CONFIRM:https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14  View
754999 85753 CVE-2015-8476 DEBIAN:DSA-3416  View
755000 85753 CVE-2015-8476 URL:http://www.debian.org/security/2015/dsa-3416  View
755001 85753 CVE-2015-8476 FEDORA:FEDORA-2015-39522bb8c9  View
755002 85753 CVE-2015-8476 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177139.html  View
755003 85753 CVE-2015-8476 FEDORA:FEDORA-2015-abf9659276  View
755004 85753 CVE-2015-8476 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177130.html  View
755005 85753 CVE-2015-8476 BID:78619  View

Related JVN