PT-2006-6544 · Enemies Of Carlotta · Enemies Of Carlotta

Antti-Juhani Kaijanaho · Published 2006-12-14 · Updated 2017-07-20 · CVE-2006-5875

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Enemies of Carlotta (EoC) versions prior to 1.2.4

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address" in the eoc.py file.

Recommendations For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-5875

DSA-1236-1

Affected Products

Enemies Of Carlotta

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-5875 · Security Note
• http://debian.org/security/2006/dsa-1236 · Vendor Advisory
• http://liw.iki.fi/lists/eoc%40liw.iki.fi/msg00366.html · Note
• http://vupen.com/english/advisories/2006/5000 · Note
• http://osvdb.org/30849 · Note
• http://secunia.com/advisories/23382 · Note
• http://secunia.com/advisories/23377 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30923 · Note
• http://securityfocus.com/bid/21572 · Note