CVE-2011-4542: SQL Injection
Published Nov 30, 2011
·Updated
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafts action to the default URI.
Affected Software
29 affected components
Hastymail Hastymail2=beta1
Hastymail Hastymail2=beta2
Hastymail Hastymail2=beta3
Hastymail Hastymail2=rc1
Hastymail Hastymail2=rc2
Hastymail Hastymail2=rc3
Hastymail Hastymail2=rc4
Hastymail Hastymail2=rc5
Hastymail Hastymail2=rc6
Hastymail Hastymail2=rc7
Hastymail Hastymail2=rc8
Hastymail Hastymail2=rc9
Hastymail Hastymail2<=2.1.1
Hastymail Hastymail2=1.0
Hastymail Hastymail2=1.01
Hastymail Hastymail2=1.1-rc1
Hastymail Hastymail2=1.1-rc2
Hastymail Hastymail2=2.0
Hastymail Hastymail2=2.0-a1
Hastymail Hastymail2=2.0-a2
Hastymail Hastymail2=2.0-b1
Hastymail Hastymail2=2.0-b2
Hastymail Hastymail2=2.0-b3
Hastymail Hastymail2=2.0-rc1
Hastymail Hastymail2=2.0.1
Hastymail Hastymail2=2.0.2
Hastymail Hastymail2=2.0.3
Hastymail Hastymail2=2.0.4
Hastymail Hastymail2=2.0.5
Event History
Nov 30, 2011
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4542?
CVE-2011-4542 has a high severity rating due to its potential for remote command execution.
2
How do I fix CVE-2011-4542?
To fix CVE-2011-4542, upgrade to a version of Hastymail2 that is released after RC2.
3
What versions are affected by CVE-2011-4542?
CVE-2011-4542 affects all Hastymail2 versions prior to RC2, including beta releases and RC versions 1 through 9.
4
What type of attacks can CVE-2011-4542 lead to?
CVE-2011-4542 can lead to remote code execution attacks, allowing attackers to execute arbitrary commands.
5
Is there a workaround for CVE-2011-4542?
A temporary workaround for CVE-2011-4542 includes restricting access to the mailbox Drafts action for untrusted users.