CVEvulnerability

CVE-2002-1582

10.0 HIGH Published 2004-12-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-12-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.

Affected configurations

• mailreader.com mailreader.com 2.3.30 • mailreader.com mailreader.com 2.3.31

References

http://www.iss.net/security_center/static/10491.php Patch, Vendor Advisory
http://www.mailreader.com/download/ChangeLog Vendor Advisory
http://www.securityfocus.com/archive/1/297428 Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/6058 Patch, Vendor Advisory
http://www.iss.net/security_center/static/10491.php Patch, Vendor Advisory
http://www.mailreader.com/download/ChangeLog Vendor Advisory
http://www.securityfocus.com/archive/1/297428 Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/6058 Patch, Vendor Advisory