Vulnetix
Try Vulnetix Request Demo
CVE-2009-1381 PUBLISHED CVSS 6.800000190734863 MEDIUM

The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOTE: this issue exists because of an incomplete fix for CVE-2009-1579.

EPSS 0.59% · 69.1th percentile

Risk Scores

CVSS v2.0
6.800000190734863
EPSS Score
0.59%
69.1th percentile

Affected Products

VendorProductVersions
n/an/an/a
squirrelmailsquirrelmail1.2.5, 1.2.6, 1.2.6-rc1
squirrelmailimap_general.php1.2.2

Timeline

References

Open in Interactive Console →