Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2010-1132

Date: March 26, 2010

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.

Severity Score

Related Resources (22)

http://www.vupen.com/english/advisories/2010/0683
http://secunia.com/advisories/38956
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038777.html
http://osvdb.org/62809
http://www.securitytracker.com/id?1023691
http://secunia.com/advisories/38840
http://www.exploit-db.com/exploits/11662
http://www.vupen.com/english/advisories/2010/0559
https://savannah.nongnu.org/bugs/?29136
https://exchange.xforce.ibmcloud.com/vulnerabilities/56732
http://secunia.com/advisories/39265
https://people.canonical.com/~ubuntu-security/cve/CVE-2010-1132
http://www.vupen.com/english/advisories/2010/0837
http://www.debian.org/security/2010/dsa-2021
http://bugs.debian.org/573228
http://www.securityfocus.com/bid/38578
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038572.html
https://nvd.nist.gov/vuln/detail/CVE-2010-1132
http://archives.neohapsis.com/archives/fulldisclosure/2010-03/0139.html
https://bugzilla.redhat.com/show_bug.cgi?id=572117
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038535.html
https://www.mend.io/vulnerability-database/CVE-2010-1132

Severity Score

Weakness Type (CWE)

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-78

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us