First published: Mon Aug 27 2007(Updated: )
email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Bugzilla | =3.0.0 | |
Mozilla Bugzilla | =2.23.4 | |
Mozilla Bugzilla | =2.6 | |
Mozilla Bugzilla | =2.4 | |
Mozilla Bugzilla | =2.8 | |
Mozilla Bugzilla | =2.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.