Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-16744
HistorySep 13, 2018 - 4:29 p.m.

Command injection

2018-09-1316:29:00
PRIOn knowledge base
www.prio-n.com
6

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.

CPENameOperatorVersion
mgettylt1.2.1

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%