CVEvulnerability
CVE-2005-1960
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-06-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.
References
- http://secunia.com/advisories/15582 Patch, Vendor Advisory
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html Vendor Advisory
- http://secunia.com/advisories/15582 Patch, Vendor Advisory
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html Vendor Advisory