Description
Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter.
References
- 16886 third-party-advisory
- http://www.cirt.net/advisories/alkalay.shtml
- notify-from-command-injection(22353) vdb-entry
- 19521 vdb-entry
- http://www.alkalay.net/software
- 14893 vdb-entry
- ADV-2005-1809 vdb-entry