Search

Find a vulnerability

Search criteria

    2 vulnerabilities by perl-mailtools

    CVE-2002-1271 (GCVE-0-2002-1271)

    Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:19
    VLAI
    Summary
    The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2158 records in the last 180 days details
    References
    URL Tags
    http://www.debian.org/security/2003/dsa-386 vendor-advisoryx_refsource_DEBIAN
    http://www.iss.net/security_center/static/10548.php vdb-entryx_refsource_XF
    http://marc.info/?l=bugtraq&m=103659723101369&w=2 mailing-listx_refsource_BUGTRAQ
    http://marc.info/?l=bugtraq&m=103679569705086&w=2 mailing-listx_refsource_BUGTRAQ
    http://www.securityfocus.com/bid/6104 vdb-entryx_refsource_BID
    http://www.linux-mandrake.com/en/security/2002/MD… vendor-advisoryx_refsource_MANDRAKE
    http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
    Date Public
    2002-11-05 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.466Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-386",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-386"
          },
          {
            "name": "mail-mailer-command-execution(10548)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/10548.php"
          },
          {
            "name": "20021106 GLSA: MailTools",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=103659723101369\u0026w=2"
          },
          {
            "name": "20021108 [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=103679569705086\u0026w=2"
          },
          {
            "name": "6104",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6104"
          },
          {
            "name": "MDKSA-2002:076",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php"
          },
          {
            "name": "SuSE-SA:2002:041",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-11-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2004-08-04T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-386",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-386"
        },
        {
          "name": "mail-mailer-command-execution(10548)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/10548.php"
        },
        {
          "name": "20021106 GLSA: MailTools",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=103659723101369\u0026w=2"
        },
        {
          "name": "20021108 [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=103679569705086\u0026w=2"
        },
        {
          "name": "6104",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6104"
        },
        {
          "name": "MDKSA-2002:076",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php"
        },
        {
          "name": "SuSE-SA:2002:041",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1271",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-386",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-386"
            },
            {
              "name": "mail-mailer-command-execution(10548)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/10548.php"
            },
            {
              "name": "20021106 GLSA: MailTools",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=103659723101369\u0026w=2"
            },
            {
              "name": "20021108 [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=103679569705086\u0026w=2"
            },
            {
              "name": "6104",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6104"
            },
            {
              "name": "MDKSA-2002:076",
              "refsource": "MANDRAKE",
              "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php"
            },
            {
              "name": "SuSE-SA:2002:041",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1271",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2002-11-05T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.466Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2002-1271 (GCVE-0-2002-1271)

    Vulnerability from nvd – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:19
    VLAI
    Summary
    The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2158 records in the last 180 days details
    References
    URL Tags
    http://www.debian.org/security/2003/dsa-386 vendor-advisoryx_refsource_DEBIAN
    http://www.iss.net/security_center/static/10548.php vdb-entryx_refsource_XF
    http://marc.info/?l=bugtraq&m=103659723101369&w=2 mailing-listx_refsource_BUGTRAQ
    http://marc.info/?l=bugtraq&m=103679569705086&w=2 mailing-listx_refsource_BUGTRAQ
    http://www.securityfocus.com/bid/6104 vdb-entryx_refsource_BID
    http://www.linux-mandrake.com/en/security/2002/MD… vendor-advisoryx_refsource_MANDRAKE
    http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
    Date Public
    2002-11-05 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.466Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-386",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-386"
          },
          {
            "name": "mail-mailer-command-execution(10548)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/10548.php"
          },
          {
            "name": "20021106 GLSA: MailTools",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=103659723101369\u0026w=2"
          },
          {
            "name": "20021108 [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=103679569705086\u0026w=2"
          },
          {
            "name": "6104",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6104"
          },
          {
            "name": "MDKSA-2002:076",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php"
          },
          {
            "name": "SuSE-SA:2002:041",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-11-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2004-08-04T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-386",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-386"
        },
        {
          "name": "mail-mailer-command-execution(10548)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/10548.php"
        },
        {
          "name": "20021106 GLSA: MailTools",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=103659723101369\u0026w=2"
        },
        {
          "name": "20021108 [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=103679569705086\u0026w=2"
        },
        {
          "name": "6104",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6104"
        },
        {
          "name": "MDKSA-2002:076",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php"
        },
        {
          "name": "SuSE-SA:2002:041",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1271",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-386",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-386"
            },
            {
              "name": "mail-mailer-command-execution(10548)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/10548.php"
            },
            {
              "name": "20021106 GLSA: MailTools",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=103659723101369\u0026w=2"
            },
            {
              "name": "20021108 [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=103679569705086\u0026w=2"
            },
            {
              "name": "6104",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6104"
            },
            {
              "name": "MDKSA-2002:076",
              "refsource": "MANDRAKE",
              "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php"
            },
            {
              "name": "SuSE-SA:2002:041",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1271",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2002-11-05T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.466Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}