CVE-2006-5449 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-5449
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5449

Description: procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule.

CVE Status: Candidate

References: SAID Secunia Advisory: SA22482 Secunia Advisory: SA22656 Secunia Advisory: SA23100 MLIST http://lists.horde.org/archives/announce/2006/000296.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200611-22.xml DEBIAN http://www.debian.org/security/2006/dsa-1204 CONFIRM http://bugs.horde.org/ticket/?Horde=6ed1a009f3396864553976a45948339e&id=4513 BID 20637

Return to the previous page.