CVEvulnerability
CVE-2002-1271
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-11-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.
Affected configurations
• perl-mailtools perl-mailtools 1.13
• perl-mailtools perl-mailtools 1.15
• perl-mailtools perl-mailtools 1.40
• perl-mailtools perl-mailtools 1.42
• perl-mailtools perl-mailtools 1.44
• perl-mailtools perl-mailtools 1.47
• perl-mailtools perl-mailtools 1.1401
References
- http://marc.info/?l=bugtraq&m=103659723101369&w=2 marc.info
- http://marc.info/?l=bugtraq&m=103679569705086&w=2 marc.info
- http://www.debian.org/security/2003/dsa-386 www.debian.org
- http://www.iss.net/security_center/static/10548.php Vendor Advisory
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php www.linux-mandrake.com
- http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html www.novell.com
- http://www.securityfocus.com/bid/6104 www.securityfocus.com
- http://marc.info/?l=bugtraq&m=103659723101369&w=2 marc.info
- http://marc.info/?l=bugtraq&m=103679569705086&w=2 marc.info
- http://www.debian.org/security/2003/dsa-386 www.debian.org
- http://www.iss.net/security_center/static/10548.php Vendor Advisory
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php www.linux-mandrake.com
- http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html www.novell.com
- http://www.securityfocus.com/bid/6104 www.securityfocus.com