{"id": "SECURITYVULNS:DOC:30041", "bulletinFamily": "software", "title": "[SECURITY] [DSA 2805-1] sup-mail security update", "description": "\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n- -------------------------------------------------------------------------\r\nDebian Security Advisory DSA-2805-1 security@debian.org\r\nhttp://www.debian.org/security/ Luciano Bello\r\nNovember 27, 2013 http://www.debian.org/security/faq\r\n- -------------------------------------------------------------------------\r\n\r\nPackage : sup-mail\r\nVulnerability : command injection\r\nProblem type : remote\r\nDebian-specific: no\r\nCVE ID : CVE-2013-4478 CVE-2013-4479\r\nDebian Bug : 728232\r\n\r\njoernchen of Phenoelit discovered two command injection flaws in Sup, a\r\nconsole-based email client. An attacker might execute arbitrary command \r\nif the user opens a maliciously crafted email.\r\n\r\nCVE-2013-4478\r\n\r\n Sup wrongly handled the filename of attachments.\r\n\r\nCVE-2013-4479\r\n\r\n Sup did not sanitize the content-type of attachments.\r\n\r\nFor the oldstable distribution (squeeze), these problems have been fixed in\r\nversion 0.11-2+nmu1+deb6u1.\r\n\r\nFor the stable distribution (wheezy), these problems have been fixed in\r\nversion 0.12.1+git20120407.aaa852f-1+deb7u1.\r\n\r\nWe recommend that you upgrade your sup-mail packages.\r\n\r\nFurther information about Debian Security Advisories, how to apply\r\nthese updates to your system and frequently asked questions can be\r\nfound at: http://www.debian.org/security/\r\n\r\nMailing list: debian-security-announce@lists.debian.org\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.12 (GNU/Linux)\r\n\r\niEYEARECAAYFAlKWXoIACgkQQWTRs4lLtHlQWwCeLPf1Y2SrfseZSRdOuv4Qf2Kp\r\nemwAniwS6y/oIM/CjwGCJzly4IfeW7gA\r\n=aytc\r\n-----END PGP SIGNATURE-----\r\n", "published": "2013-12-01T00:00:00", "modified": "2013-12-01T00:00:00", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:30041", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2013-4479", "CVE-2013-4478"], "type": "securityvulns", "lastseen": "2018-08-31T11:10:49", "edition": 1, "viewCount": 4, "enchantments": {"score": {"value": 6.5, "vector": "NONE"}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2013-4478", "CVE-2013-4479"]}, {"type": "debian", "idList": ["DEBIAN:DSA-2805-1:66007"]}, {"type": "debiancve", "idList": ["DEBIANCVE:CVE-2013-4478", "DEBIANCVE:CVE-2013-4479"]}, {"type": "fedora", "idList": ["FEDORA:BA58060CA247", "FEDORA:C2C22609A145"]}, {"type": "nessus", "idList": ["DEBIAN_DSA-2805.NASL", "FEDORA_2015-14929.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310892805", "OPENVAS:892805"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:13435"]}, {"type": "ubuntucve", "idList": ["UB:CVE-2013-4478", "UB:CVE-2013-4479"]}], "rev": 4}, "backreferences": {"references": [{"type": "cve", "idList": ["CVE-2013-4478", "CVE-2013-4479"]}, {"type": "debian", "idList": ["DEBIAN:DSA-2805-1:66007"]}, {"type": "debiancve", "idList": ["DEBIANCVE:CVE-2013-4478"]}, {"type": "fedora", "idList": ["FEDORA:C2C22609A145"]}, {"type": "nessus", "idList": ["DEBIAN_DSA-2805.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:892805"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:13435"]}]}, "exploitation": null, "vulnersScore": 6.5}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1647631082}}

{"nessus": [{"lastseen": "2021-08-19T12:52:04", "description": "joernchen of Phenoelit discovered two command injection flaws in Sup, a console-based email client. An attacker might execute arbitrary command if the user opens a maliciously crafted email.\n\n - CVE-2013-4478 Sup wrongly handled the filename of attachments.\n\n - CVE-2013-4479 Sup did not sanitize the content-type of attachments.", "cvss3": {"score": null, "vector": null}, "published": "2013-11-29T00:00:00", "type": "nessus", "title": "Debian DSA-2805-1 : sup-mail - command injection", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2013-4478", "CVE-2013-4479"], "modified": "2021-01-11T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:sup-mail", "cpe:/o:debian:debian_linux:6.0", "cpe:/o:debian:debian_linux:7.0"], "id": "DEBIAN_DSA-2805.NASL", "href": "https://www.tenable.com/plugins/nessus/71118", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-2805. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(71118);\n script_version(\"1.10\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2013-4478\", \"CVE-2013-4479\");\n script_bugtraq_id(63398, 63409);\n script_xref(name:\"DSA\", value:\"2805\");\n\n script_name(english:\"Debian DSA-2805-1 : sup-mail - command injection\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"joernchen of Phenoelit discovered two command injection flaws in Sup,\na console-based email client. An attacker might execute arbitrary\ncommand if the user opens a maliciously crafted email.\n\n - CVE-2013-4478\n Sup wrongly handled the filename of attachments.\n\n - CVE-2013-4479\n Sup did not sanitize the content-type of attachments.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728232\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2013-4478\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2013-4479\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/squeeze/sup-mail\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/wheezy/sup-mail\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.debian.org/security/2013/dsa-2805\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the sup-mail packages.\n\nFor the oldstable distribution (squeeze), these problems have been\nfixed in version 0.11-2+nmu1+deb6u1.\n\nFor the stable distribution (wheezy), these problems have been fixed\nin version 0.12.1+git20120407.aaa852f-1+deb7u1.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:sup-mail\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:6.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:7.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2013/11/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/11/29\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"6.0\", prefix:\"sup-mail\", reference:\"0.11-2+nmu1+deb6u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"sup-mail\", reference:\"0.12.1+git20120407.aaa852f-1+deb7u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:deb_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-08-19T12:44:48", "description": "ruby-ncurses-1.3.1-16.fc23 - Fix Ruby 2.2 compatibility. rubygem- sup-0.21.0-3.fc23 - Relax rubygem-chronic dependency. - Temporary use ncurses, until rubygem-ncursesw is in Fedora. - Small cleanup.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {"score": null, "vector": null}, "published": "2015-09-08T00:00:00", "type": "nessus", "title": "Fedora 23 : ruby-ncurses-1.3.1-16.fc23 / rubygem-sup-0.21.0-3.fc23 (2015-14929)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2013-4479"], "modified": "2021-01-11T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:ruby-ncurses", "p-cpe:/a:fedoraproject:fedora:rubygem-sup", "cpe:/o:fedoraproject:fedora:23"], "id": "FEDORA_2015-14929.NASL", "href": "https://www.tenable.com/plugins/nessus/85830", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2015-14929.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(85830);\n script_version(\"2.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2013-4479\");\n script_xref(name:\"FEDORA\", value:\"2015-14929\");\n\n script_name(english:\"Fedora 23 : ruby-ncurses-1.3.1-16.fc23 / rubygem-sup-0.21.0-3.fc23 (2015-14929)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"ruby-ncurses-1.3.1-16.fc23 - Fix Ruby 2.2 compatibility. rubygem-\nsup-0.21.0-3.fc23 - Relax rubygem-chronic dependency. - Temporary use\nncurses, until rubygem-ncursesw is in Fedora. - Small cleanup.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1024647\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2015-September/165916.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?d6c5f511\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2015-September/165917.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?011dfbd4\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected ruby-ncurses and / or rubygem-sup packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:ruby-ncurses\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:rubygem-sup\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:23\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/09/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/09/08\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^23([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 23.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC23\", reference:\"ruby-ncurses-1.3.1-16.fc23\")) flag++;\nif (rpm_check(release:\"FC23\", reference:\"rubygem-sup-0.21.0-3.fc23\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ruby-ncurses / rubygem-sup\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "openvas": [{"lastseen": "2017-07-24T12:51:54", "description": "joernchen of Phenoelit discovered two command injection flaws in Sup, a\nconsole-based email client. An attacker might execute arbitrary command\nif the user opens a maliciously crafted email.\n\nCVE-2013-4478 \nSup wrongly handled the filename of attachments.\n\nCVE-2013-4479 \nSup did not sanitize the content-type of attachments.", "cvss3": {}, "published": "2013-11-27T00:00:00", "type": "openvas", "title": "Debian Security Advisory DSA 2805-1 (sup-mail - command injection)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2013-4479", "CVE-2013-4478"], "modified": "2017-07-07T00:00:00", "id": "OPENVAS:892805", "href": "http://plugins.openvas.org/nasl.php?oid=892805", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_2805.nasl 6611 2017-07-07 12:07:20Z cfischer $\n# Auto-generated from advisory DSA 2805-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2013 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\n\ntag_affected = \"sup-mail on Debian Linux\";\ntag_insight = \"Sup is a console-based email client for people with a lot of email. It\nsupports tagging, very fast full-text search, automatic contact-list\nmanagement, custom code insertion via a hook system, and more. If\nyou're the type of person who treats email as an extension of your\nlong-term memory, Sup is for you.\";\ntag_solution = \"For the oldstable distribution (squeeze), these problems have been fixed in\nversion 0.11-2+nmu1+deb6u1.\n\nFor the stable distribution (wheezy), these problems have been fixed in\nversion 0.12.1+git20120407.aaa852f-1+deb7u1.\n\nWe recommend that you upgrade your sup-mail packages.\";\ntag_summary = \"joernchen of Phenoelit discovered two command injection flaws in Sup, a\nconsole-based email client. An attacker might execute arbitrary command\nif the user opens a maliciously crafted email.\n\nCVE-2013-4478 \nSup wrongly handled the filename of attachments.\n\nCVE-2013-4479 \nSup did not sanitize the content-type of attachments.\";\ntag_vuldetect = \"This check tests the installed software version using the apt package manager.\";\n\nif(description)\n{\n script_id(892805);\n script_version(\"$Revision: 6611 $\");\n script_cve_id(\"CVE-2013-4479\", \"CVE-2013-4478\");\n script_name(\"Debian Security Advisory DSA 2805-1 (sup-mail - command injection)\");\n script_tag(name: \"last_modification\", value:\"$Date: 2017-07-07 14:07:20 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name: \"creation_date\", value:\"2013-11-27 00:00:00 +0100 (Wed, 27 Nov 2013)\");\n script_tag(name: \"cvss_base\", value:\"6.8\");\n script_tag(name: \"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_xref(name: \"URL\", value: \"http://www.debian.org/security/2013/dsa-2805.html\");\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2013 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name: \"affected\", value: tag_affected);\n script_tag(name: \"insight\", value: tag_insight);\n# script_tag(name: \"impact\", value: tag_impact);\n script_tag(name: \"solution\", value: tag_solution);\n script_tag(name: \"summary\", value: tag_summary);\n script_tag(name: \"vuldetect\", value: tag_vuldetect);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n exit(0);\n}\n\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"sup-mail\", ver:\"0.11-2+nmu1+deb6u1\", rls:\"DEB6.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"sup-mail\", ver:\"0.12.1+git20120407.aaa852f-1+deb7u1\", rls:\"DEB7.0\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-05-29T18:37:55", "description": "joernchen of Phenoelit discovered two command injection flaws in Sup, a\nconsole-based email client. An attacker might execute arbitrary command\nif the user opens a maliciously crafted email.\n\nCVE-2013-4478\nSup wrongly handled the filename of attachments.\n\nCVE-2013-4479\nSup did not sanitize the content-type of attachments.", "cvss3": {}, "published": "2013-11-27T00:00:00", "type": "openvas", "title": "Debian Security Advisory DSA 2805-1 (sup-mail - command injection)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2013-4479", "CVE-2013-4478"], "modified": "2019-03-18T00:00:00", "id": "OPENVAS:1361412562310892805", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310892805", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_2805.nasl 14276 2019-03-18 14:43:56Z cfischer $\n# Auto-generated from advisory DSA 2805-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2013 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.892805\");\n script_version(\"$Revision: 14276 $\");\n script_cve_id(\"CVE-2013-4479\", \"CVE-2013-4478\");\n script_name(\"Debian Security Advisory DSA 2805-1 (sup-mail - command injection)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 15:43:56 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2013-11-27 00:00:00 +0100 (Wed, 27 Nov 2013)\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_xref(name:\"URL\", value:\"http://www.debian.org/security/2013/dsa-2805.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2013 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB(6|7)\");\n script_tag(name:\"affected\", value:\"sup-mail on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the oldstable distribution (squeeze), these problems have been fixed in\nversion 0.11-2+nmu1+deb6u1.\n\nFor the stable distribution (wheezy), these problems have been fixed in\nversion 0.12.1+git20120407.aaa852f-1+deb7u1.\n\nWe recommend that you upgrade your sup-mail packages.\");\n script_tag(name:\"summary\", value:\"joernchen of Phenoelit discovered two command injection flaws in Sup, a\nconsole-based email client. An attacker might execute arbitrary command\nif the user opens a maliciously crafted email.\n\nCVE-2013-4478\nSup wrongly handled the filename of attachments.\n\nCVE-2013-4479\nSup did not sanitize the content-type of attachments.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif((res = isdpkgvuln(pkg:\"sup-mail\", ver:\"0.11-2+nmu1+deb6u1\", rls:\"DEB6\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"sup-mail\", ver:\"0.12.1+git20120407.aaa852f-1+deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "securityvulns": [{"lastseen": "2018-08-31T11:09:53", "description": "It&#39;s possible to inject commands via filename and Content-Type.", "edition": 1, "cvss3": {}, "published": "2013-12-01T00:00:00", "title": "Sup-mail commands injection", "type": "securityvulns", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2013-4479", "CVE-2013-4478"], "modified": "2013-12-01T00:00:00", "id": "SECURITYVULNS:VULN:13435", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:13435", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "debian": [{"lastseen": "2021-10-21T23:25:30", "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-2805-1 security@debian.org\nhttp://www.debian.org/security/ Luciano Bello\nNovember 27, 2013 http://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : sup-mail\nVulnerability : command injection\nProblem type : remote\nDebian-specific: no\nCVE ID : CVE-2013-4478 CVE-2013-4479\nDebian Bug : 728232\n\njoernchen of Phenoelit discovered two command injection flaws in Sup, a\nconsole-based email client. An attacker might execute arbitrary command \nif the user opens a maliciously crafted email.\n\nCVE-2013-4478\n\n Sup wrongly handled the filename of attachments.\n\nCVE-2013-4479\n\n Sup did not sanitize the content-type of attachments.\n\nFor the oldstable distribution (squeeze), these problems have been fixed in\nversion 0.11-2+nmu1+deb6u1.\n\nFor the stable distribution (wheezy), these problems have been fixed in\nversion 0.12.1+git20120407.aaa852f-1+deb7u1.\n\nWe recommend that you upgrade your sup-mail packages.\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: http://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org", "cvss3": {}, "published": "2013-11-27T21:38:58", "type": "debian", "title": "[SECURITY] [DSA 2805-1] sup-mail security update", "bulletinFamily": "unix", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4478", "CVE-2013-4479"], "modified": "2013-11-27T21:38:58", "id": "DEBIAN:DSA-2805-1:66007", "href": "https://lists.debian.org/debian-security-announce/2013/msg00219.html", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "fedora": [{"lastseen": "2020-12-21T08:17:53", "description": "Sup is a console-based email client for people with a lot of email. It supports tagging, very fast full-text search, automatic contact-list management, and more. If you're the type of person who treats email as an extension of your long-term memory, Sup is for you. Sup makes it easy to: - Handle massive amounts of email. - Mix email from different sources: mbox files (even across different machines), Maildir directories, IMAP folders, POP accounts, and GMail accounts. - Instantaneously search over your entire em ail collection. Search over body text, or use a query language to combine search predicates in any way. - Handle multiple accounts. Replying to email sent to a particular account will use the correct SMTP server, signature, and from address. - Add custom code to handle certain types of messages or to handle certain types of text within messages. - Organize email with user-defined labels, automatically track recent contacts, and much more! The goal of Sup is to become the email client of choice for nerds everywhere. ", "edition": 2, "cvss3": {}, "published": "2015-09-07T16:42:11", "type": "fedora", "title": "[SECURITY] Fedora 23 Update: rubygem-sup-0.21.0-3.fc23", "bulletinFamily": "unix", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4479"], "modified": "2015-09-07T16:42:11", "id": "FEDORA:C2C22609A145", "href": "", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:53", "description": "This ruby extension makes most functions, constants, and external variables of the C library ncurses accessible from the Ruby programming language. ", "edition": 2, "cvss3": {}, "published": "2015-09-07T16:42:11", "type": "fedora", "title": "[SECURITY] Fedora 23 Update: ruby-ncurses-1.3.1-16.fc23", "bulletinFamily": "unix", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4479"], "modified": "2015-09-07T16:42:11", "id": "FEDORA:BA58060CA247", "href": "", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "ubuntucve": [{"lastseen": "2021-11-22T21:52:38", "description": "lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1\nallows remote attackers to execute arbitrary commands via shell\nmetacharacters in the content_type of an email attachment.\n\n#### Bugs\n\n * <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728232>\n", "cvss3": {}, "published": "2013-12-07T00:00:00", "type": "ubuntucve", "title": "CVE-2013-4479", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4479"], "modified": "2013-12-07T00:00:00", "id": "UB:CVE-2013-4479", "href": "https://ubuntu.com/security/CVE-2013-4479", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-11-22T21:46:54", "description": "Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to\nexecute arbitrary commands via shell metacharacters in the filename of an\nemail attachment.\n\n#### Bugs\n\n * <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728232>\n", "cvss3": {}, "published": "2013-12-07T00:00:00", "type": "ubuntucve", "title": "CVE-2013-4478", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4478"], "modified": "2013-12-07T00:00:00", "id": "UB:CVE-2013-4478", "href": "https://ubuntu.com/security/CVE-2013-4478", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "cve": [{"lastseen": "2022-03-23T13:38:36", "description": "lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment.", "cvss3": {}, "published": "2013-12-07T20:55:00", "type": "cve", "title": "CVE-2013-4479", "cwe": ["CWE-94"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4479"], "modified": "2016-12-22T02:59:00", "cpe": ["cpe:/a:supmua:sup:0.14.1", "cpe:/a:supmua:sup:0.14.0", "cpe:/a:supmua:sup:0.13.1", "cpe:/a:supmua:sup:0.13.2", "cpe:/a:supmua:sup:0.13.0"], "id": "CVE-2013-4479", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4479", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:supmua:sup:0.13.1:*:*:*:*:*:*:*", "cpe:2.3:a:supmua:sup:0.14.1:*:*:*:*:*:*:*", "cpe:2.3:a:supmua:sup:0.13.2:*:*:*:*:*:*:*", "cpe:2.3:a:supmua:sup:0.13.0:*:*:*:*:*:*:*", "cpe:2.3:a:supmua:sup:0.14.0:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T13:38:36", "description": "Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment.", "cvss3": {}, "published": "2013-12-07T20:55:00", "type": "cve", "title": "CVE-2013-4478", "cwe": ["CWE-94"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4478"], "modified": "2013-12-09T17:54:00", "cpe": ["cpe:/a:supmua:sup:0.14.1", "cpe:/a:supmua:sup:0.14.0", "cpe:/a:supmua:sup:0.13.1", "cpe:/a:supmua:sup:0.13.2", "cpe:/a:supmua:sup:0.13.0"], "id": "CVE-2013-4478", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4478", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:supmua:sup:0.13.1:*:*:*:*:*:*:*", "cpe:2.3:a:supmua:sup:0.14.1:*:*:*:*:*:*:*", "cpe:2.3:a:supmua:sup:0.13.2:*:*:*:*:*:*:*", "cpe:2.3:a:supmua:sup:0.13.0:*:*:*:*:*:*:*", "cpe:2.3:a:supmua:sup:0.14.0:*:*:*:*:*:*:*"]}], "debiancve": [{"lastseen": "2021-12-14T17:53:05", "description": "lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment.", "cvss3": {}, "published": "2013-12-07T20:55:00", "type": "debiancve", "title": "CVE-2013-4479", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4479"], "modified": "2013-12-07T20:55:00", "id": "DEBIANCVE:CVE-2013-4479", "href": "https://security-tracker.debian.org/tracker/CVE-2013-4479", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-12-14T17:53:05", "description": "Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment.", "cvss3": {}, "published": "2013-12-07T20:55:00", "type": "debiancve", "title": "CVE-2013-4478", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2013-4478"], "modified": "2013-12-07T20:55:00", "id": "DEBIANCVE:CVE-2013-4478", "href": "https://security-tracker.debian.org/tracker/CVE-2013-4478", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}]}