Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 24/04/2007 Updated: 29/07/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP prior to 4.0.6-r2, and 4.1.x prior to 4.1.2-r1, on Gentoo Linux allows remote malicious users to execute arbitrary commands via the XMAILDIR variable, related to the LOGINRUN variable.

Vulnerable Product	Search on Vulmon	Subscribe to Product
double_precision_incorporated courier-imap 4.0.0
double_precision_incorporated courier-imap 4.0.1
double_precision_incorporated courier-imap 4.1.0
double_precision_incorporated courier-imap 4.1.1
double_precision_incorporated courier-imap 4.0.2
double_precision_incorporated courier-imap 4.0.3
double_precision_incorporated courier-imap 4.0.4
double_precision_incorporated courier-imap 4.0.5

NVD-CWE-Other http://bugs.gentoo.org/show_bug.cgi?id=168196 http://security.gentoo.org/glsa/glsa-200704-18.xml http://secunia.com/advisories/24963 http://www.securityfocus.com/bid/23589 http://osvdb.org/35274 https://exchange.xforce.ibmcloud.com/vulnerabilities/33805 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-2173

Vulnerability Summary

References

Vulmon Search

About

Products

Connect