Back to search
CVE-2009-1381
Published: May 22, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOTE: this issue exists because of an incomplete fix for CVE-2009-1579.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
35140
third-party-advisory
x_refsource_SECUNIA
FEDORA-2009-5350
vendor-advisory
x_refsource_FEDORA
20090521 [SECURITY] [DSA 1802-2] New squirrelmail packages correct incomplete fix
mailing-list
x_refsource_BUGTRAQ
MDVSA-2009:122
vendor-advisory
x_refsource_MANDRIVA
FEDORA-2009-5471
vendor-advisory
x_refsource_FEDORA
DSA-1802
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now