CVEvulnerability
CVE-2002-0532
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.
Affected configurations
• emumail emumail 3.0
• emumail emumail red hat linux 5.0
• emumail emumail red hat linux 5.1
• emumail emumail unix 5.0
• emumail emumail unix 5.1
References
- http://online.securityfocus.com/archive/1/266930 Vendor Advisory
- http://www.iss.net/security_center/static/8836.php Vendor Advisory
- http://www.osvdb.org/5270 www.osvdb.org
- http://www.securityfocus.com/bid/4488 Vendor Advisory
- http://online.securityfocus.com/archive/1/266930 Vendor Advisory
- http://www.iss.net/security_center/static/8836.php Vendor Advisory
- http://www.osvdb.org/5270 www.osvdb.org
- http://www.securityfocus.com/bid/4488 Vendor Advisory