NVD

Id
12666  
Name
CVE-2010-1132  
Description
The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-03-27  
Modified Date
2011-02-01  
Seq
2010-1132  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69513 12666 CVE-2010-1132 20100307 Spamassassin Milter Plugin Remote Root  View
69514 12666 CVE-2010-1132 http://bugs.debian.org/573228  View
69515 12666 CVE-2010-1132 FEDORA-2010-5096  View
69516 12666 CVE-2010-1132 FEDORA-2010-5176  View
69517 12666 CVE-2010-1132 FEDORA-2010-5112  View
69518 12666 CVE-2010-1132 DSA-2021  View
69519 12666 CVE-2010-1132 11662  View
69520 12666 CVE-2010-1132 38578  View
69521 12666 CVE-2010-1132 1023691  View
69522 12666 CVE-2010-1132 ADV-2010-0559  View
69523 12666 CVE-2010-1132 ADV-2010-0683  View
69524 12666 CVE-2010-1132 ADV-2010-0837  View
69525 12666 CVE-2010-1132 spamassassin-expand-command-execution(56732)  View
69526 12666 CVE-2010-1132 https://bugzilla.redhat.com/show_bug.cgi?id=572117  View
69527 12666 CVE-2010-1132 https://savannah.nongnu.org/bugs/?29136  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38153 JVNDB-2010-003938 SpamAssassin Milter プラグインにおける任意のシステムコマンドを実行される脆弱性 SpamAssassin Milter プラグインの spamass-milter.cpp の mlfi_envrcpt 関数は、拡張オプションを使用している際、任意のシステムコマンドを実行される脆弱性が存在します。 CVE-2010-1132 43712 CVE-2010-1132 12666 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003938.html 2010-03-27 2012-06-26 View