CVE-2002-1271
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.
El módulo Perl Mail:Mailer en el paquete perl-MailTools 1.47 y anteriores usa mailx como el programa de correo por defecto, lo que permite a atacantes remotos ejecutar comandos arbitrarios insertándolos en el cuerpo del correo, que es entonces procesado por mailx
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2002-11-05 CVE Reserved
- 2002-11-12 CVE Published
- 2023-08-09 EPSS Updated
- 2024-08-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=bugtraq&m=103659723101369&w=2 | Mailing List | |
| http://marc.info/?l=bugtraq&m=103679569705086&w=2 | Mailing List | |
| http://www.securityfocus.com/bid/6104 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2003/dsa-386 | 2016-10-18 | |
| http://www.iss.net/security_center/static/10548.php | 2016-10-18 | |
| http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php | 2016-10-18 | |
| http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html | 2016-10-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Perl-mailtools Search vendor "Perl-mailtools" | Perl-mailtools Search vendor "Perl-mailtools" for product "Perl-mailtools" | 1.13 Search vendor "Perl-mailtools" for product "Perl-mailtools" and version "1.13" | - |
Affected
| ||||||
| Perl-mailtools Search vendor "Perl-mailtools" | Perl-mailtools Search vendor "Perl-mailtools" for product "Perl-mailtools" | 1.15 Search vendor "Perl-mailtools" for product "Perl-mailtools" and version "1.15" | - |
Affected
| ||||||
| Perl-mailtools Search vendor "Perl-mailtools" | Perl-mailtools Search vendor "Perl-mailtools" for product "Perl-mailtools" | 1.40 Search vendor "Perl-mailtools" for product "Perl-mailtools" and version "1.40" | - |
Affected
| ||||||
| Perl-mailtools Search vendor "Perl-mailtools" | Perl-mailtools Search vendor "Perl-mailtools" for product "Perl-mailtools" | 1.42 Search vendor "Perl-mailtools" for product "Perl-mailtools" and version "1.42" | - |
Affected
| ||||||
| Perl-mailtools Search vendor "Perl-mailtools" | Perl-mailtools Search vendor "Perl-mailtools" for product "Perl-mailtools" | 1.44 Search vendor "Perl-mailtools" for product "Perl-mailtools" and version "1.44" | - |
Affected
| ||||||
| Perl-mailtools Search vendor "Perl-mailtools" | Perl-mailtools Search vendor "Perl-mailtools" for product "Perl-mailtools" | 1.47 Search vendor "Perl-mailtools" for product "Perl-mailtools" and version "1.47" | - |
Affected
| ||||||
| Perl-mailtools Search vendor "Perl-mailtools" | Perl-mailtools Search vendor "Perl-mailtools" for product "Perl-mailtools" | 1.1401 Search vendor "Perl-mailtools" for product "Perl-mailtools" and version "1.1401" | - |
Affected
| ||||||