CVE-2006-5449

procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule...

CVE-2006-5449

CVE-2006-5449 affects Ingo H3 (Horde module) and allows remote authenticated users to execute arbitrary shell commands via metacharacters in the mailbox destination of a filter rule. The issue arises from inadequate escaping in procmail rule generation. Affected software is Ingo H3 up to version ...