DEBIAN-CVE-2012-2140

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...

Code injection

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...

CVE-2012-2140

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...

CVE-2012-2140

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...

CVE-2012-2140

The CVE-2012-2140 entry concerns the rubygem-mail package for Ruby, version prior to 2.4.3. The vulnerability arises in the mail gem’s Exim/Sendmail delivery paths where improper input handling allows a remote attacker to execute arbitrary commands via shell metacharacters. Public documentation i...

CVE-2012-2140

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...

CVE-2012-2140: Improper Input Validation

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...

PT-2012-3832

Name of the Vulnerable Software and Affected Versions Mail gem versions prior to 2.4.3 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a sendmail or exim delivery. Recommendations For Mail gem versions prior to 2.4.3, update to version 2.4.3...

Vulnerability in AIX sendmail

IBM SECURITY ADVISORY First Issued: Mon Jul 16 13:28:25 CDT 2012 | Updated: Tue Sept 27 9:50:28 CDT 2012 | Update: New ifixes to include sendmailssl and sendmailnossl | Update: Corrected file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added...

Wordpress Diary/Notebook Site5 Theme Email Spoofing

Exploit for php platform in category web applications !/usr/bin/perl Exploit Title: Diary/Notebook Site5 Wordpress Theme - Email Spoofing Date: 15.07.2012 Exploit Author: @bwallHatesTwits Discovered by: @xxDigiPxx...

Site5 WordPress Theme Email Spoofing

!/usr/bin/perl Exploit Title: Site5 Wordpress Themes - Email Spoofing Date: 15.07.2012 Exploit Author: @bwallHatesTwits Discovered by: @xxDigiPxx http://www.ticktockcomputers.com/wordpress/site5-wordpress-theme-diary-sendmail-php-spoofing/ Software Link: http://www.wpdiarytheme.com/ Vendor...

IBM AIX 7.1/6.1 Sendmail本地权限提升漏洞

Bugtraq ID: 54206 CVE ID: CVE-2012-2200 IBM AIX是一款商业执行的操作系统。 在处理用户$HOME/.forward文件中某些结构时sendmail存在错误，允许本地攻击者利用漏洞以root特权执行任意代码。 0 IBM AIX 7.1 IBM AIX 6.1 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://aix.software.ibm.com/aix/efixes/security/sendmail1advisory.asc...

CVE-2012-2200

The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory...

CVE-2012-2200

The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory...

CVE-2012-2200

The CVE-2012-2200 issue affects IBM AIX 6.1/7.1 (and VIOS 2.2.1.4-FP-25 SP-02) where the default sendmail configuration allows local users to gain root privileges by placing a command in a user’s .forward file. The root cause is execution of commands piped from the .forward mechanism within stock...

CVE-2012-2200: Undefined Security Weakness

The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory...

PT-2012-3876

Name of the Vulnerable Software and Affected Versions sendmail in IBM AIX versions 6.1 through 7.1 sendmail in VIOS version 2.2.1.4-FP-25 SP-02 Description The default configuration of sendmail allows local users to gain privileges by entering a command in a .forward file in a home directory...

GLSA-201206-30 : sendmail: X.509 NULL spoofing vulnerability

The remote host is affected by the vulnerability described in GLSA-201206-30 sendmail: X.509 NULL spoofing vulnerability A vulnerability has been discovered in sendmail. Please review the CVE identifier referenced below for details. Impact : A remote attacker might employ a specially crafted...

sendmail: X.509 NULL spoofing vulnerability

Background sendmail is a widely-used Mail Transport Agent MTA. Description A vulnerability has been discovered in sendmail. Please review the CVE identifier referenced below for details. Impact A remote attacker might employ a specially crafted certificate to conduct man-in-the-middle attacks on...

Linux Gather Configurations

This module collects configuration files found on commonly installed applications and services, such as Apache, MySQL, Samba, Sendmail, etc. If a config file is found in its default path, the module will assume that is the file we want. This module requires Metasploit:...