1 matches found
CVE-2018-16741: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function doactivate does not properly sanitize shell metacharacters to prevent command injection. It is possible to use the ||, &&, or characters within a file created by the "faxq-helper activate " command...
7.8CVSS7.2AI score0.01323EPSS
SaveExploits2References2
20