Description
RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command.
References
- 19991006 Fwd: [Re: RH6.0 local/remote command execution] mailing-list
- 19991004 RH6.0 local/remote command execution mailing-list
- linux-rh-rpmmail(3353) vdb-entry