CVE-2002-1271 The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mai...
HighCVSS 7.5
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| perl-mailtools | = 1.13 | No fix listed |
| perl-mailtools | = 1.15 | No fix listed |
| perl-mailtools | = 1.40 | No fix listed |
| perl-mailtools | = 1.42 | No fix listed |
| perl-mailtools | = 1.44 | No fix listed |
| perl-mailtools | = 1.47 | No fix listed |
| perl-mailtools | = 1.1401 | No fix listed |
| debian/libmailtools-perl(Debian:12) | < 1.51 | 1.51 |
| debian/libmailtools-perl(Debian:13) | < 1.51 | 1.51 |
| debian/libmailtools-perl(Debian:14) | < 1.51 | 1.51 |
References
- 20021106 GLSA: MailTools mailing-list
- 20021108 [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update mailing-list
- DSA-386 vendor-advisory
- mail-mailer-command-execution(10548) vdb-entry vendor-advisory
- MDKSA-2002:076 vendor-advisory
- SuSE-SA:2002:041 vendor-advisory
- 6104 vdb-entry
- Debian Security Tracker CVE-2002-1271 vendor-advisory
- bugs.debian.org issue-tracking