CVE-2002-1771: Medium severity Matt Wright FormMail vulnerability
Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1771?
CVE-2002-1771 is considered a medium severity vulnerability due to its potential to allow spam and anonymous email sending.
How do I fix CVE-2002-1771?
To fix CVE-2002-1771, you should upgrade to a newer version of Matt Wright FormMail, as versions 1.9 and earlier are vulnerable.
What systems are affected by CVE-2002-1771?
CVE-2002-1771 affects Matt Wright FormMail versions 1.0 through 1.9.
What does CVE-2002-1771 exploit?
CVE-2002-1771 exploits vulnerabilities in the handling of email fields, allowing newline injection in email headers.
Is CVE-2002-1771 still a risk today?
While CVE-2002-1771 primarily affects outdated versions of FormMail, any systems still using these versions may still be at risk.