CVE-2007-4538 — Mozilla Bugzilla vulnerability

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.9%
top 24.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Bugzilla
Timeline
PublishedAug 27
Latest updateMay 1

Description

email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/bugzilla6 versions+5

Patches

Patch: secunia.com ↗Patch: www.securityfocus.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5qwc-vr8c-3fj4: email_in↗2022-05-01
▶
CVEList
CVE-2007-4538: email_in↗2007-08-27
▶

💬Community

1
Bugzilla
CVE-2006-4538 kernel: Local DoS with corrupted ELF↗2007-09-13
▶
CVE-2007-4538 — Mozilla Bugzilla vulnerability | cvebase