PT-2016-4569 · Swift · Swiftmailer

Dawid Golunski + 1 · Publicado 2016-12-30 · Atualizado 2022-05-17 · CVE-2016-10074

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Swift Mailer versions prior to 5.4.5

Description The issue allows remote attackers to potentially execute arbitrary code by passing extra parameters to the mail command. This can be achieved by including a (backslash double quote) in a crafted e-mail address within the From, ReturnPath, or Sender header.

Recommendations For versions prior to 5.4.5, update to version 5.4.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of special characters in e-mail addresses within the From, ReturnPath, or Sender headers until a patch is applied.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2016-10074

DLA-792-1

DSA-3769-1

GHSA-PR44-4JFR-286M

Produtos afetados

Swiftmailer

Referências · 23

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/swiftmailer/swiftmailer/CVE-2016-10074.yaml · Exploit
• 🔥 https://exploit-db.com/exploits/40972 · Exploit
• 🔥 https://exploit-db.com/exploits/42221 · Exploit
• 🔥 https://legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.html · Exploit
• 🔥 https://exploit-db.com/exploits/40986 · Exploit
• 🔥 http://packetstormsecurity.com/files/140290/SwiftMailer-Remote-Code-Execution.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2016/Dec/86 · Exploit
• https://github.com/swiftmailer/swiftmailer/blob/5.x/CHANGES · Aviso do Fabricante
• https://packages.debian.org/src:libphp-swiftmailer · Nota
• http://securityfocus.com/bid/95140 · Nota
• https://osv.dev/vulnerability/CVE-2016-10074 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/libphp-swiftmailer · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10074 · Nota de Segurança
• http://debian.org/security/2017/dsa-3769 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/DSA-3769-1 · Aviso do Fabricante