Unscored CVE-2004-0324 EUVD-2004-0324GHSA-4565-7jh8-9r34

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters suc…

Published Mar 18, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.

References

20040223 Lam3rZ Security Advisory #3/2004: A bug in Confirm leads to remote command execution mailing-list
9728 vdb-entry
confirm-header-gain-access(15290) vdb-entry