Uw-Imap Project Uw-Imap vulnerabilities

1 known vulnerability affecting uw-imap_project/uw-imap.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2018-19518HIGHCVSS 7.5PoCv2007f2018-11-25

CVE-2018-19518 [HIGH] CWE-88 CVE-2018-19518: University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other product University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the I