Unscored CVE-2002-0532 EUVD-2002-0527GHSA-xj67-986p-6xph

EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse confi…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.

References

5270 vdb-entry
emumail-http-host-execute(8836) vdb-entry
20020410 Re: emumail.cgi, one more local vulnerability (not verified) mailing-list
4488 vdb-entry