CVE-2004-1468 The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.
HighCVSS 7.5
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| usermin | = 1.000 | No fix listed |
| usermin | = 1.010 | No fix listed |
| usermin | = 1.020 | No fix listed |
| usermin | = 1.030 | No fix listed |
| usermin | = 1.040 | No fix listed |
| usermin | = 1.051 | No fix listed |
| usermin | = 1.060 | No fix listed |
| usermin | = 1.070 | No fix listed |
| usermin | = 1.080 | No fix listed |
| webmin | = 1.0.00 | No fix listed |
| webmin | = 1.0.20 | No fix listed |
| webmin | = 1.0.50 | No fix listed |
| webmin | = 1.0.60 | No fix listed |
| webmin | = 1.0.70 | No fix listed |
| webmin | = 1.0.80 | No fix listed |
| webmin | = 1.0.90 | No fix listed |
| webmin | = 1.1.00 | No fix listed |
| webmin | = 1.1.10 | No fix listed |
| webmin | = 1.1.21 | No fix listed |
| webmin | = 1.1.30 | No fix listed |
| webmin | = 1.1.40 | No fix listed |
| webmin | = 1.1.50 | No fix listed |
References
- 12488 patch third-party-advisory
- GLSA-200409-15 patch vendor-advisory
- www.lac.co.jp
- 11122 exploit patch vdb-entry
- usermin-web-mail-command-execution(17293) vdb-entry