Description
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.
References
- 11122 vdb-entry
- http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/77_e.html
- 12488 third-party-advisory
- GLSA-200409-15 vendor-advisory
- usermin-web-mail-command-execution(17293) vdb-entry