CVE-2009-1579

The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary…

published May 14, 2009

CVSS
—
EPSS
3%
Percentile
88.8
In the wild
Unconfirmed
What it is

The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03399 · 88.8th percentile
Published
2009-05-14T17:00Z
EPSS history
Timeline
  • 14 MAY 17:00Z
    The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary…
    cvelistv5