CVE-2007-1081: High severity Typo3 TYPO3 vulnerability
Published Feb 22, 2007
·Updated
The start function in class.t3libformmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information.
Affected Software
3 affected components
Typo3 TYPO3<=4.0.4
Typo3 TYPO3<=4.1
Typo3 TYPO3<=4.1
Event History
Feb 22, 2007
CVE Published
11:28 PM
Feb 23, 2007
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1081?
CVE-2007-1081 is considered a critical vulnerability due to its potential to allow arbitrary email header injection.
2
Which versions of TYPO3 are affected by CVE-2007-1081?
CVE-2007-1081 affects TYPO3 versions prior to 4.0.5, including all 4.0.4 and pre-release 4.1beta and 4.1RC1 versions.
3
How do I fix CVE-2007-1081?
To fix CVE-2007-1081, upgrade TYPO3 to version 4.0.5 or later.
4
What impact does CVE-2007-1081 have on TYPO3 applications?
CVE-2007-1081 allows attackers to inject arbitrary email headers, which can lead to phishing attacks or spam.
5
Can CVE-2007-1081 be exploited remotely?
Yes, CVE-2007-1081 can be exploited remotely if the vulnerable TYPO3 versions are accessible on the internet.