PT-2018-2653 · Washington University+4 · University Of Washington Imap Toolkit+5
Hanno Böck
·
Publicado
2018-11-15
·
Atualizado
2025-09-29
·
CVE-2018-19518
CVSS v2.0
8.5
Alta
| Vetor | AV:N/AC:M/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
University of Washington IMAP Toolkit version 2007f
PHP (affected versions not specified)
uw-imap (affected versions not specified)
Description
The issue is related to insufficient neutralization of special elements in the IMAP interpreter component. This might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input. For example, if rsh is replaced by a program with different argument semantics, such as a link to ssh, an attack can use an IMAP server name containing a "-oProxyCommand" argument to exploit the issue.
Recommendations
For University of Washington IMAP Toolkit version 2007f, consider disabling the use of rsh commands until a patch is available.
For PHP, restrict access to the imap open() function to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Argument Injection
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Php
Suse
Ubuntu
University Of Washington Imap Toolkit
Uw-Imap