CVE-2007-4538
published 2007-08-27CVE-2007-4538: email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the…
PriorityP433medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
1.92%
77.6th percentile
email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
http://osvdb.org/37203http://secunia.com/advisories/26584http://secunia.com/advisories/26971http://security.gentoo.org/glsa/glsa-200709-18.xmlhttp://www.bugzilla.org/security/2.20.4/http://www.securityfocus.com/archive/1/477630/100/0/threadedhttp://www.securityfocus.com/bid/25425http://www.securitytracker.com/id?1018604http://www.vupen.com/english/advisories/2007/2977https://bugzilla.mozilla.org/show_bug.cgi?id=386860https://exchange.xforce.ibmcloud.com/vulnerabilities/36243http://osvdb.org/37203http://secunia.com/advisories/26584http://secunia.com/advisories/26971http://security.gentoo.org/glsa/glsa-200709-18.xmlhttp://www.bugzilla.org/security/2.20.4/http://www.securityfocus.com/archive/1/477630/100/0/threadedhttp://www.securityfocus.com/bid/25425http://www.securitytracker.com/id?1018604http://www.vupen.com/english/advisories/2007/2977https://bugzilla.mozilla.org/show_bug.cgi?id=386860https://exchange.xforce.ibmcloud.com/vulnerabilities/36243
2007-08-27
Published