PT-2016-4600 · Acmailer · Acmailer

Kazuhiro Shibuta · Published 2016-01-16 · Updated 2019-02-20 · CVE-2016-1142

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions acmailer versions prior to 3.8.21 acmailer versions 3.9.x prior to 3.9.15 Beta

Description The issue allows remote authenticated users to execute arbitrary OS commands.

Recommendations For acmailer versions prior to 3.8.21, update to version 3.8.21 or later. For acmailer versions 3.9.x prior to 3.9.15 Beta, update to version 3.9.15 Beta or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2016-1142

Affected Products

Acmailer

References · 5

• http://jvn.jp/en/jp/JVN50899877/index.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1142 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1142 · Vendor Advisory
• http://acmailer.jp/info/de.cgi?id=64 · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000002 · Vendor Advisory