Skip to content
OpenAdvisories
Unscored DLA-869-1 4 CVEs

cgiemail - security update

Published Mar 24, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 cgiemail 1.6-37+deb7u1

Vulnerabilities 4

  • Unscored —

    Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string…

  • Unscored —

    Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites an…

  • Unscored —

    cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

  • Unscored —

    Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script…