Description
Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in (1) a word that is being spell checked or (2) an e-mail address.
References
- 20021018 SCAN Associates Advisory: madhater perlbot 1.0 beta - Remote Command Execution mailing-list
- perlbot-email-command-execution(10402) vdb-entry
- 5999 vdb-entry
- perlbot-shell-command-execution(10401) vdb-entry
- 5998 vdb-entry