Authentication flaw

admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sysusermng operation via the it parameter...

Command injection

PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account...

Code injection

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation...

Design/Logic Flaw

admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation...

CVE-2013-6831

PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account...

CVE-2013-6829

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation...

CVE-2013-6830

admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation...

CVE-2013-6827

CVE-2013-6827 affects PineApp Mail-SeCure appliances, with an absolute path traversal in the admin/viewmsg.php endpoint. The vulnerability allows an attacker to read arbitrary files by supplying a full pathname in the msg parameter. The issue is confirmed by multiple feeds in the connected docume...

CVE-2013-6830

CVE-2013-6830 affects PineApp Mail-SeCure before version 3.70 on 5099SK and earlier platforms. A vulnerability in the admin/confnetworking.html page allows remote attackers to inject shell commands via the nsserver parameter during an nslookup request due to insufficient input sanitization of met...

CVE-2013-6829

CVE-2013-6829 describes a remote command injection in PineApp Mail-SeCure via the admin/confnetworking.html interface. The vulnerability allows an attacker to append shell metacharacters in the pinghost parameter during a ping operation, leading to arbitrary command execution on the remote host. ...

CVE-2013-6828

CVE-2013-6828 : The connected sources confirm a remote authentication-bypass vulnerability in PineApp Mail-SeCure, where accessing the admin/management.html page allows bypassing authentication and performing a sys_usermng operation via the it parameter. Affected component: admin interface of Pin...

CVE-2013-6828

admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sysusermng operation via the it parameter...

CVE-2013-6831

CVE-2013-6831 affects PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms. The sudoers configuration allows local users to gain privileges via a sudo command that leverages access to the qmailq account. The provided connected documents corroborate the affected product/version and...

PT-2013-6140

Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure versions 3.70 and earlier Description The issue is related to a sudoers file that does not properly restrict user specifications. This allows local users to gain privileges via a sudo command that leverages access to the...

PT-2013-6137

Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure affected versions not specified Description The issue allows remote attackers to bypass authentication and perform certain operations. Specifically, it involves the admin/management.html page and the it parameter, which can...

PineApp MailSecure - Remote Command Execution

PineApp MailSecure - Remote Command Execution ----------------------------------------------------------------- It is possible execute any command bash as qmailq unprivilege user, sending only the following https request, without authentication...

CVE-2013-6828: Improper Authentication

admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sysusermng operation via the it parameter...

CVE-2013-6831: Undefined Security Weakness

PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account...

CVE-2013-6829: Improper Control of Generation of Code

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation...

CVE-2013-6830: Improper Control of Generation of Code

admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation...