Lucene search

K
cve[email protected]CVE-2007-3778
HistoryJul 15, 2007 - 10:30 p.m.

CVE-2007-3778

2007-07-1522:30:00
web.nvd.nist.gov
20
cve-2007-3778
g/pgp plugin
squirrelmail
remote attackers
arbitrary commands
shell metacharacters

7.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.7%

The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php. NOTE: a parameter value can be set in the contents of an e-mail message.

Affected configurations

NVD
Node
squirrelmailgpg_pluginMatch2.0
OR
squirrelmailgpg_pluginMatch2.1_dev

7.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.7%

Related for CVE-2007-3778