exploit-CVE-2016-9920

Roundcube 1.0.0 = 1.2.2 Ejecución Remota de Código Roundcube es un software de webmail de código abierto ampliamente distribuido utilizado por muchas organizaciones y empresas en todo el mundo. El espejo en SourceForge, por ejemplo, cuenta con más de 260,000 descargas en los últimos 12 meses, lo...

Updated roundcubemail packages fix security vulnerability

Users can execute commands on the server by writing e-mails, due to insufficient sanitation of the from field when calling PHP's mail function CVE-2016-9920. Note that only roundcubemail installations that don't have an SMTP server configured for mail delivery are affected...

Fedora Update for roundcubemail FEDORA-2016-b4896f20b3

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for roundcubemail FEDORA-2016-60753c3dcd

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-9920

steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute...

CVE-2016-9920

CVE-2016-9920 affects Roundcube before 1.1.7 and 1.2.x before 1.2.3. When no SMTP server is configured and sendmail is enabled, steps/mail/sendmail.inc does not properly restrict custom envelope-from addresses on the sendmail command line, allowing a remote authenticated user to execute arbitrary...

CVE-2016-9920

steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute...

FreeBSD : Roundcube -- arbitrary command execution (125f5958-b611-11e6-a9a5-b499baebfeaf)

The Roundcube project reports steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote...