Unscored CVE-2007-2173 EUVD-2007-2168GHSA-cfwg-x2fv-2v2c

Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP before 4.0.6-r2, and 4.1.x before…

Published Apr 24, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP before 4.0.6-r2, and 4.1.x before 4.1.2-r1, on Gentoo Linux allows remote attackers to execute arbitrary commands via the XMAILDIR variable, related to the LOGINRUN variable.

References

gentoo-courier-imap-command-execution(33805) vdb-entry
GLSA-200704-18 vendor-advisory
23589 vdb-entry
35274 vdb-entry
24963 third-party-advisory
http://bugs.gentoo.org/show_bug.cgi?id=168196