CVE-2007-3778 The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_ch...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php. NOTE: a parameter value can be set in the contents of an e-mail message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squirrelmail gpg plugin | = 2.0 | No fix listed |
| squirrelmail gpg plugin | = 2.1_dev | No fix listed |
References
- 20070711 SquirrelMail G/PGP Plugin gpg_check_sign_pgp_mime() Command Injection Vulnerability patch third-party-advisory
- [dailydave] 20070708 SquirrelMail GPG Plugin vuln mailing-list
- [dailydave] 20070709 SquirrelMail GPG Plugin vuln mailing-list
- 37931 vdb-entry
- 26035 third-party-advisory vendor-advisory
- 20070710 SquirrelMail GPG Plugin Vulnerabilities mailing-list
- 20070711 True: SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln mailing-list
- 24874 vdb-entry
- ADV-2007-2513 vdb-entry
- squirrelmail-gpgp-hook-command-execution(35363) vdb-entry