PT-2000-1842 · Pegasus · Pegasus Mail

Publicado 2000-12-19 · Atualizado 2017-10-10 · CVE-2000-0930

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pegasus Mail version 3.12

Description The issue allows remote attackers to read arbitrary files. This is achieved by using an embedded URL that calls the mailto: protocol with a -F switch.

Recommendations For Pegasus Mail version 3.12, consider disabling the mailto: protocol or restricting its use until a patch is available. Avoid using the -F switch in the mailto: protocol to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2000-0930

Produtos afetados

Pegasus Mail

Referências · 6

• 🔥 https://exploit-db.com/exploits/20249 · Exploit
• 🔥 http://securityfocus.com/bid/1738 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0930 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5326 · Nota