Lucene search

MitreCVE-2002-1582

HistoryDec 06, 2004 - 5:00 a.m.

CVE-2002-1582

2004-12-0605:00:00

mitre

web.nvd.nist.gov

cve-2002-1582

mailreader

sendmail

command execution

network.cgi

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.014

Percentile

86.6%

JSON

compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.

Affected configurations

Nvd

Node

mailreader.commailreader.comMatch2.3.30

mailreader.commailreader.comMatch2.3.31

VendorProductVersionCPE
mailreader.commailreader.com2.3.30cpe:2.3:a:mailreader.com:mailreader.com:2.3.30:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.31cpe:2.3:a:mailreader.com:mailreader.com:2.3.31:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mailreader.com	mailreader.com	2.3.30	cpe:2.3:a:mailreader.com:mailreader.com:2.3.30:::::::*
mailreader.com	mailreader.com	2.3.31	cpe:2.3:a:mailreader.com:mailreader.com:2.3.31:::::::*

References

www.iss.net/security_center/static/10491.php

www.mailreader.com/download/ChangeLog

www.securityfocus.com/archive/1/297428

www.securityfocus.com/bid/6058

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.014

Percentile

86.6%

JSON

Related for CVE-2002-1582