Description
Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Openfind | Mail2000 V7.0 | Patch 55 – < Patch 124 | Patch 124 |
| Openfind | Mail2000 V8.0 | earlier – < Patch 31 | Patch 31 |
References
- https://www.twcert.org.tw/tw/cp-132-7817-6ce29-1.html third-party-advisory