CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

DEBIAN-CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

Code injection

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

UBUNTU-CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

Code injection

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

UBUNTU-CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4478

CVE-2013-4478 affects Sup versions prior to 0.13.2.1 and prior to 0.14.1.1, where remote attackers could execute arbitrary commands via shell metacharacters in the filename of an email attachment. The fixed releases are 0.13.2.1 and 0.14.1.1, per the descriptions in the connected records. Practic...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4479

CVE-2013-4479 affects the Sup email client: vulnerable component is lib/sup/message_chunks.rb. Exposed in versions before 0.13.2.1 and 0.14.x before 0.14.1.1, allowing remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment. Impact is rem...

Threat Outbreak Alert: Fake Account Statement Information Email Messages on December 5, 2013

Medium Alert ID: 32055 First Published: 2013 December 6 20:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account statement for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Product Catalog Email Messages on March 26, 2014

Medium Alert ID: 32054 First Published: 2013 December 6 19:01 GMT Last Updated: 2014 March 27 12:56 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product catalogue for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Payment Request Email Messages on December 5, 2013

Medium Alert ID: 32056 First Published: 2013 December 6 18:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain a payment request notification for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake File Attachment Notification Email Messages on December 5, 2013

Medium Alert ID: 32062 First Published: 2013 December 6 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a file for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Mortgage Update Information Email Messages on December 6, 2013

Medium Alert ID: 32063 First Published: 2013 December 6 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain mortgage details for the recipient. The text in the email message attempts to convince the recipient to open t...