This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of PineApp Mail-SeCure. Authentication is not required to exploit this vulnerability. The specific flaw exists with input sanitization in the test_li_connection.php component. This flaw allows for the injection of arbitrary commands to the Mail-SeCure server. An attacker could leverage this vulnerability to execute arbitrary code as root.
{"id": "ZDI-13-188", "vendorId": null, "type": "zdi", "bulletinFamily": "info", "title": "(0Day) PineApp Mail-SeCure test_li_connection.php Remote Code Execution Vulnerability", "description": "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of PineApp Mail-SeCure. Authentication is not required to exploit this vulnerability. The specific flaw exists with input sanitization in the test_li_connection.php component. This flaw allows for the injection of arbitrary commands to the Mail-SeCure server. An attacker could leverage this vulnerability to execute arbitrary code as root.", "published": "2013-07-26T00:00:00", "modified": "2013-07-26T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://www.zerodayinitiative.com/advisories/ZDI-13-188/", "reporter": "Dave Weinstein, HP Zero Day Initiative", "references": ["http://technet.microsoft.com/en-us/library/cc725770(WS.10).aspx"], "cvelist": [], "immutableFields": [], "lastseen": "2022-02-10T00:00:00", "viewCount": 4, "enchantments": {"dependencies": {"references": [{"type": "exploitdb", "idList": ["EDB-ID:27293"]}, {"type": "metasploit", "idList": ["MSF:EXPLOIT/LINUX/HTTP/PINEAPP_TEST_LI_CONN_EXEC", "MSF:EXPLOIT/LINUX/HTTP/PINEAPP_TEST_LI_CONN_EXEC/"]}, {"type": "nessus", "idList": ["PINEAPP_MAIL_SECURE_TEST_LI_CONNECTION_RCE.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310103748"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:122591"]}, {"type": "saint", "idList": ["SAINT:5A80A198E3FF765562D2811E03164B06", "SAINT:73A33D7C3A348901606300037E1ADB87", "SAINT:C44FB02EBEBBE5B97E0F225BBA614B60", "SAINT:E3DC4EDE01A55E9929E860B132D24B97"]}, {"type": "seebug", "idList": ["SSV:80907"]}, {"type": "zdt", "idList": ["1337DAY-ID-21047"]}], "rev": 4}, "score": {"value": 4.1, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": 4.1}, "_state": {"dependencies": 1647737812, "score": 1659764195, "epss": 1678800746}}