7.5
CVSSv2

CVE-2002-1271

Published: 12/11/2002 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The Mail::Mailer Perl module in the perl-MailTools package 1.47 and previous versions uses mailx as the default mailer, which allows remote malicious users to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.

Vulnerable Product Search on Vulmon Subscribe to Product

perl-mailtools perl-mailtools 1.40

perl-mailtools perl-mailtools 1.42

perl-mailtools perl-mailtools 1.13

perl-mailtools perl-mailtools 1.1401

perl-mailtools perl-mailtools 1.15

perl-mailtools perl-mailtools 1.44

perl-mailtools perl-mailtools 1.47

Vendor Advisories

The SuSE security team discovered during an audit a bug in Mail::Mailer, a Perl module used for sending email, whereby potentially untrusted input is passed to a program such as mailx, which may interpret certain escape sequences as commands to be executed This bug has been fixed by removing support for programs such as mailx as a transport for se ...