CVE-2010-1132

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.
Configurations

Configuration 1 (hide)

cpe:2.3:a:georg_greve:spamassassin_milter_plugin:0.3.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-03-27 19:07

Updated : 2024-02-28 11:41


NVD link : CVE-2010-1132

Mitre link : CVE-2010-1132

CVE.ORG link : CVE-2010-1132


JSON object : View

Products Affected

georg_greve

  • spamassassin_milter_plugin
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')