CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

Code injection

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

Code injection

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

UBUNTU-CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4478

CVE-2013-4478 affects Sup versions prior to 0.13.2.1 and prior to 0.14.1.1, where remote attackers could execute arbitrary commands via shell metacharacters in the filename of an email attachment. The fixed releases are 0.13.2.1 and 0.14.1.1, per the descriptions in the connected records. Practic...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4479

CVE-2013-4479 affects the Sup email client: vulnerable component is lib/sup/message_chunks.rb. Exposed in versions before 0.13.2.1 and 0.14.x before 0.14.1.1, allowing remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment. Impact is rem...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 4, 2013

Medium Alert ID: 32007 First Published: 2013 December 4 16:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Processing Notification Email Messages on November 29, 2013

Medium Alert ID: 31943 First Published: 2013 December 2 16:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment processing details for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Product Request Email Messages on November 19, 2013

Medium Alert ID: 31825 First Published: 2013 November 19 20:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Monthly Report Notification Email Messages on November 19, 2013

Medium Alert ID: 31827 First Published: 2013 November 19 17:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a report from HM Revenue & Customs for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Company Financial Report Email Messages on November 15, 2013

Medium Alert ID: 31788 First Published: 2013 November 15 21:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a financial report for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Payment Document Attachment Email Messages on November 11, 2013

Medium Alert ID: 31720 First Published: 2013 November 12 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information document for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Receipt Notification Email Messages on November 11, 2013

Medium Alert ID: 31711 First Published: 2013 November 11 20:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment receipt notification for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on November 7, 2013

Medium Alert ID: 31673 First Published: 2013 November 7 20:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request for the recipient. The text in the email message attempts to persuade the recipient to open...