Lucene search

K
cve[email protected]CVE-2011-4542
HistoryNov 30, 2011 - 4:05 a.m.

CVE-2011-4542

2011-11-3004:05:58
CWE-89
web.nvd.nist.gov
26
cve-2011-4542
hastymail2
remote code execution
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.76 High

EPSS

Percentile

98.2%

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Drafts action to the default URI.

Affected configurations

NVD
Node
hastymailhastymail2beta1
OR
hastymailhastymail2beta2
OR
hastymailhastymail2beta3
OR
hastymailhastymail2rc1
OR
hastymailhastymail2rc2
OR
hastymailhastymail2rc3
OR
hastymailhastymail2rc4
OR
hastymailhastymail2rc5
OR
hastymailhastymail2rc6
OR
hastymailhastymail2rc7
OR
hastymailhastymail2rc8
OR
hastymailhastymail2rc9
OR
hastymailhastymail2Range≀2.1.1rc1
OR
hastymailhastymail2Match1.0
OR
hastymailhastymail2Match1.01
OR
hastymailhastymail2Match1.1rc1
OR
hastymailhastymail2Match1.1rc2
OR
hastymailhastymail2Match2.0
OR
hastymailhastymail2Match2.0a1
OR
hastymailhastymail2Match2.0a2
OR
hastymailhastymail2Match2.0b1
OR
hastymailhastymail2Match2.0b2
OR
hastymailhastymail2Match2.0b3
OR
hastymailhastymail2Match2.0rc1
OR
hastymailhastymail2Match2.0.1
OR
hastymailhastymail2Match2.0.2
OR
hastymailhastymail2Match2.0.3
OR
hastymailhastymail2Match2.0.4
OR
hastymailhastymail2Match2.0.5

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.76 High

EPSS

Percentile

98.2%