PT-2016-4569 · Swift · Swiftmailer

Dawid Golunski + 1 · Published 2016-12-30 · Updated 2022-05-17 · CVE-2016-10074

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Swift Mailer versions prior to 5.4.5

Description The issue allows remote attackers to potentially execute arbitrary code by passing extra parameters to the mail command. This can be achieved by including a (backslash double quote) in a crafted e-mail address within the From, ReturnPath, or Sender header.

Recommendations For versions prior to 5.4.5, update to version 5.4.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of special characters in e-mail addresses within the From, ReturnPath, or Sender headers until a patch is applied.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2016-10074

DLA-792-1

DSA-3769-1

GHSA-PR44-4JFR-286M

Affected Products

Swiftmailer

References · 23

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/swiftmailer/swiftmailer/CVE-2016-10074.yaml · Exploit
• 🔥 https://exploit-db.com/exploits/40972 · Exploit
• 🔥 https://exploit-db.com/exploits/42221 · Exploit
• 🔥 https://legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.html · Exploit
• 🔥 https://exploit-db.com/exploits/40986 · Exploit
• 🔥 http://packetstormsecurity.com/files/140290/SwiftMailer-Remote-Code-Execution.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2016/Dec/86 · Exploit
• https://github.com/swiftmailer/swiftmailer/blob/5.x/CHANGES · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-10074 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/libphp-swiftmailer · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10074 · Security Note
• http://debian.org/security/2017/dsa-3769 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3769-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-10074 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10074 · Security Note