CVE-2015-7611 Apache James Server OS Command Injection
HighCVSS 8.1
EPSS 68.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.james/james-server(Maven) | < 2.3.2.1 | 2.3.2.1 |
| apache james server | = 2.3.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- blogs.apache.org vendor-advisory
- packetstormsecurity.com exploit
- packetstormsecurity.com exploit
- [oss-security] 20150930 Apache James Server 2.3.2 security vulnerability fixed mailing-list
- [oss-security] 20151001 Re: Apache James Server 2.3.2 security vulnerability fixed VU#988628 mailing-list
- web.archive.org
- github.com
- 20150930 Apache James Server 2.3.2 security vulnerability fixed mailing-list