Lucene search
HistoryApr 24, 2007 - 4:19 p.m.
CVE-2007-2173
cve-2007-2173
eval injection
courier-imap
vulnerability
remote attackers
gentoo linux
nvd
8.1 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.013 Low
EPSS
Percentile
85.9%
Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP before 4.0.6-r2, and 4.1.x before 4.1.2-r1, on Gentoo Linux allows remote attackers to execute arbitrary commands via the XMAILDIR variable, related to the LOGINRUN variable.
Related
openvas
openvas
Gentoo Security Advisory GLSA 200704-18 (courier-imap)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200704-18 (courier-imap)
2008-09-24 00:00:00
prion
prion
Design/Logic Flaw
2007-04-24 16:19:00
8.1 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.013 Low
EPSS
Percentile
85.9%
Related for CVE-2007-2173