![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2002-1582 |
Description: | compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi. |
Test IDs: | None available |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2002-1582 BugTraq ID: 6058 http://www.securityfocus.com/bid/6058 Bugtraq: 20021028 SCAN Associates Advisory : Multiple vurnerabilities on mailreader.com (Google Search) http://www.securityfocus.com/archive/1/297428 http://www.mailreader.com/download/ChangeLog XForce ISS Database: mailreader-compose-command-execution(10491) http://www.iss.net/security_center/static/10491.php |