Description (CNA)
Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Openfind / MailGates 5.0 | affected earlier before Patch 5.2.10.094 |
| Openfind / MailAudit 5.0 | affected earlier before Patch 5.2.10.094 |
| Openfind / MailGates 6.0 | affected earlier before Patch 6.1.7.037 |
| Openfind / MailAudit 6.0 | affected earlier before Patch 6.1.7.037 |
CWE
CWE-78
References
- https://www.twcert.org.tw/tw/cp-132-7885-a8013-1.html
- https://www.twcert.org.tw/en/cp-139-7886-20b61-2.html
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.