PT-2016-4600 · Acmailer · Acmailer

Kazuhiro Shibuta · Publicado 2016-01-16 · Atualizado 2019-02-20 · CVE-2016-1142

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions acmailer versions prior to 3.8.21 acmailer versions 3.9.x prior to 3.9.15 Beta

Description The issue allows remote authenticated users to execute arbitrary OS commands.

Recommendations For acmailer versions prior to 3.8.21, update to version 3.8.21 or later. For acmailer versions 3.9.x prior to 3.9.15 Beta, update to version 3.9.15 Beta or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2016-1142

Produtos afetados

Acmailer

Referências · 5

• http://jvn.jp/en/jp/JVN50899877/index.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1142 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1142 · Aviso do Fabricante
• http://acmailer.jp/info/de.cgi?id=64 · Aviso do Fabricante
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000002 · Aviso do Fabricante