Vulnerability Details CVE-2002-1271
The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 78.5%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=103659723101369&w=2
- http://marc.info/?l=bugtraq&m=103679569705086&w=2
- http://www.debian.org/security/2003/dsa-386
- http://www.iss.net/security_center/static/10548.php
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php
- http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html
- http://www.securityfocus.com/bid/6104
- http://marc.info/?l=bugtraq&m=103659723101369&w=2
- http://marc.info/?l=bugtraq&m=103679569705086&w=2
- http://www.debian.org/security/2003/dsa-386
- http://www.iss.net/security_center/static/10548.php
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php
- http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html
- http://www.securityfocus.com/bid/6104
Products affected by CVE-2002-1271
-
cpe:2.3:a:perl-mailtools:perl-mailtools:1.13
-
cpe:2.3:a:perl-mailtools:perl-mailtools:1.1401
-
cpe:2.3:a:perl-mailtools:perl-mailtools:1.15
-
cpe:2.3:a:perl-mailtools:perl-mailtools:1.40
-
cpe:2.3:a:perl-mailtools:perl-mailtools:1.42
-
cpe:2.3:a:perl-mailtools:perl-mailtools:1.44
-
cpe:2.3:a:perl-mailtools:perl-mailtools:1.47