CVE-2002-1582 | BDVDB-2026-6550 Detail

Description#

compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.iss.net/security_center/static/10491.php
http://www.securityfocus.com/bid/6058
http://www.securityfocus.com/archive/1/297428
http://www.mailreader.com/download/ChangeLog

Exploit#

No public exploit known

History#

Version 12004-07-06Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.