Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATH_INFO environment variable.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qmailadmin | Inter7 | 1.0.1 (including) | 1.0.1 (including) |
| Qmailadmin | Inter7 | 1.0.2 (including) | 1.0.2 (including) |
| Qmailadmin | Inter7 | 1.0.3 (including) | 1.0.3 (including) |
| Qmailadmin | Inter7 | 1.0.4 (including) | 1.0.4 (including) |
| Qmailadmin | Inter7 | 1.0.5 (including) | 1.0.5 (including) |
| Qmailadmin | Inter7 | 1.0.6 (including) | 1.0.6 (including) |
| Qmailadmin | Inter7 | 1.2.0 (including) | 1.2.0 (including) |
| Qmailadmin | Inter7 | 1.2.1 (including) | 1.2.1 (including) |
| Qmailadmin | Inter7 | 1.2.3 (including) | 1.2.3 (including) |
| Qmailadmin | Inter7 | 1.2.7 (including) | 1.2.7 (including) |
| Qmailadmin | Inter7 | 1.2.8 (including) | 1.2.8 (including) |
| Qmailadmin | Inter7 | 1.2.9 (including) | 1.2.9 (including) |