Skip to content
OpenAdvisories
Unscored CVE-2005-2662 EUVD-2005-2663GHSA-mv52-68qh-v324

masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized w…

Published Sep 21, 2005 · Updated Aug 7, 2024 · Assigned by debian

Description

masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 3.1 masqmail 0.2.20-1sarge1 DSA-848-1
Debian 3.0 masqmail 0.1.16-2.2 DSA-848-1

Advisories 1

References