Description
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
References
- http://ssl.coc-ag.de/sec/hordelib-1.2.0.frombug.patch
- 1674 vdb-entry
- 20000910 imp: remote compromise vendor-advisory
- horde-imp-sendmail-command(5278) vdb-entry
- 20000908 horde library bug - unchecked from-address mailing-list