Courier-IMAP shell characters problem
Published:		23.04.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7629
Type:		remote
Level:		8/10
Description:		Invalid usage of XMAILDIR environment variable controlled by attacker thorugh logon request in the scripts courier-imapd.indirect and courier-pop3d.indirect

Affected:

DOUBLEPRECISION : Courier-IMAP 4.0

Original document

GENTOO, [Full-disclosure] [ GLSA 200704-18 ] Courier-IMAP: Remote execution of arbitrary code (23.04.2007)

Discuss:

Read or add your comments to this news (0 comments)