CVE-2000-0910

CVE-2000-0910

Medium · published December 19, 2000

CVSS v2.0

4.6

EPSS

0%

Percentile

35.4

In the wild

Unconfirmed

What it is

Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.

The record

Technical detail

CVSS v2.0: 4.6 · MEDIUM
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0: Not supplied
EPSS: 0.00425 · 35.4th percentile
Published: 2000-12-19T10:00Z

Affected products (1)

Product	Versions	Fixed in
horde/horde	all versions	—

References (10)

http://archives.neohapsis.com/archives/bugtraq/2000-09/0051.html · [email protected]http://ssl.coc-ag.de/sec/hordelib-1.2.0.frombug.patch · [email protected]http://www.debian.org/security/2000/20000910 · [email protected]http://www.securityfocus.com/bid/1674 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/5278 · [email protected]http://archives.neohapsis.com/archives/bugtraq/2000-09/0051.html · af854a3a-2127-422b-91ae-364da2661108 http://ssl.coc-ag.de/sec/hordelib-1.2.0.frombug.patch · af854a3a-2127-422b-91ae-364da2661108 http://www.debian.org/security/2000/20000910 · af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/1674 · af854a3a-2127-422b-91ae-364da2661108 https://exchange.xforce.ibmcloud.com/vulnerabilities/5278 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

22 JAN 05:00Z
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address
cvelistv5