NVD

Id
59965  
Name
CVE-2006-1251  
Description
Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-03-18  
Modified Date
2011-10-18  
Seq
2006-1251  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308612 59965 CVE-2006-1251 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345071  View
308613 59965 CVE-2006-1251 http://marc.merlins.org/linux/exim/files/sa-exim-cvs/Changelog.html  View
308614 59965 CVE-2006-1251 17110  View
308615 59965 CVE-2006-1251 ADV-2006-0941  View
308616 59965 CVE-2006-1251 saexim-greylistclean-file-deletion(25286)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61479 JVNDB-2006-003745 sa-exim の greylistclean.cron における任意のファイルを削除される脆弱性 sa-exim の greylistclean.cron には、引数の挿入により、任意のファイルを削除される脆弱性が存在します。 CVE-2006-1251 17353 CVE-2006-1251 59965 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003745.html 2006-03-19 2013-12-26 View