CVE-2009-1381

The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions…

published May 22, 2009

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOTE: this issue exists because of an incomplete fix for CVE-2009-1579.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02944 · 87.0th percentile
Published
2009-05-22T20:00Z
EPSS history
Timeline
  • 22 MAY 20:00Z
    The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions…
    cvelistv5