Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as , `, |, ;, or $.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Confirm | Confirm | 0.50 (including) | 0.50 (including) |
| Confirm | Confirm | 0.51 (including) | 0.51 (including) |
| Confirm | Confirm | 0.52 (including) | 0.52 (including) |
| Confirm | Confirm | 0.53 (including) | 0.53 (including) |
| Confirm | Confirm | 0.54 (including) | 0.54 (including) |
| Confirm | Confirm | 0.55 (including) | 0.55 (including) |
| Confirm | Confirm | 0.60 (including) | 0.60 (including) |
| Confirm | Confirm | 0.61 (including) | 0.61 (including) |
| Confirm | Confirm | 0.62 (including) | 0.62 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=107757320401858\u0026w=2
- http://www.securityfocus.com/bid/9728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15290
- http://marc.info/?l=bugtraq\u0026m=107757320401858\u0026w=2
- http://www.securityfocus.com/bid/9728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15290