The map_yp_alias function in functions/imap_general.php in SquirrelMail prior to 1.4.18 and NaSMail prior to 1.7 allows remote malicious users to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
squirrelmail squirrelmail 1.4.0_rc2a |
||
squirrelmail squirrelmail 1.4.0 |
||
squirrelmail squirrelmail 1.3.0 |
||
squirrelmail squirrelmail 1.3.2 |
||
squirrelmail squirrelmail 1.2.11 |
||
squirrelmail squirrelmail 1.2.2 |
||
squirrelmail squirrelmail 1.0.5 |
||
squirrelmail squirrelmail 1.0pre2 |
||
squirrelmail squirrelmail 1.0.1 |
||
squirrelmail squirrelmail 1.0.2 |
||
squirrelmail squirrelmail 0.1 |
||
squirrelmail squirrelmail 0.2.1 |
||
squirrelmail squirrelmail 0.2 |
||
squirrelmail squirrelmail 1.4.10 |
||
squirrelmail squirrelmail 1.4.1 |
||
squirrelmail squirrelmail 1.2.8 |
||
squirrelmail squirrelmail 1.2.6 |
||
squirrelmail squirrelmail 1.2.3 |
||
squirrelmail squirrelmail 1.2.4 |
||
squirrelmail squirrelmail 0.1.1 |
||
squirrelmail squirrelmail 1.4.16 |
||
squirrelmail squirrelmail 1.1.3 |
||
squirrelmail squirrelmail 1.0pre1 |
||
squirrelmail squirrelmail 1.0 |
||
squirrelmail squirrelmail 0.4 |
||
squirrelmail squirrelmail 0.4pre1 |
||
squirrelmail squirrelmail 0.4pre2 |
||
squirrelmail squirrelmail |
||
squirrelmail squirrelmail 0.1.2 |
||
squirrelmail squirrelmail 1.4.15_rc1 |
||
squirrelmail squirrelmail 1.4.15 |
||
squirrelmail squirrelmail 1.2.9 |
||
squirrelmail squirrelmail 1.4 |
||
squirrelmail squirrelmail 1.3.1 |
||
squirrelmail squirrelmail 1.2.0 |
||
squirrelmail squirrelmail 1.2.1 |
||
squirrelmail squirrelmail 1.2.0_rc3 |
||
squirrelmail squirrelmail 1.2.10 |
||
squirrelmail squirrelmail 1.0.4 |
||
squirrelmail squirrelmail 1.0pre3 |
||
squirrelmail squirrelmail 1.0.3 |
||
squirrelmail squirrelmail 0.5pre1 |
||
squirrelmail squirrelmail 0.3.1 |
||
squirrelmail squirrelmail 0.3 |
||
squirrelmail squirrelmail 1.4.12 |
||
squirrelmail squirrelmail 1.4.11 |
||
squirrelmail squirrelmail 1.4.10a |
||
squirrelmail squirrelmail 1.2.7 |
||
squirrelmail squirrelmail 1.4.0_rc1 |
||
squirrelmail squirrelmail 1.2 |
||
squirrelmail squirrelmail 1.2.5 |
||
squirrelmail squirrelmail 1.1.1 |
||
squirrelmail squirrelmail 1.1.2 |
||
squirrelmail squirrelmail 1.0.6 |
||
squirrelmail squirrelmail 1.1.0 |
||
squirrelmail squirrelmail 0.5pre2 |
||
squirrelmail squirrelmail 0.5 |
||
squirrelmail squirrelmail 0.3pre2 |
||
squirrelmail squirrelmail 0.3pre1 |