CVE-2004-2284 The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument.
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open webmail | = 1.7 | No fix listed |
| open webmail | = 1.8 | No fix listed |
| open webmail | = 1.71 | No fix listed |
| open webmail | = 1.81 | No fix listed |
| open webmail | = 1.90 | No fix listed |
| open webmail | = 2.20 | No fix listed |
| open webmail | = 2.21 | No fix listed |
| open webmail | = 2.30 | No fix listed |
| open webmail | = 2.31 | No fix listed |
| open webmail | = 2.32 | No fix listed |
References
- openwebmail.org patch vendor-advisory
- 12017 patch third-party-advisory vendor-advisory
- 1010605 patch vdb-entry
- 7474 patch vdb-entry
- 10637 patch vdb-entry
- open-webmail-vacation-program-execution(16549) vdb-entry