Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-5449
HistoryOct 23, 2006 - 5:07 p.m.

CVE-2006-5449

2006-10-2317:07:00
mitre
web.nvd.nist.gov
40
cve-2006-5449
procmail
ingo h3
remote authenticated users
arbitrary commands
shell metacharacters
mailbox destination

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.006

Percentile

78.2%

JSON

procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule.

Affected configurations

Nvd
Node
hordeingo_h3Range≤1.1.1
VendorProductVersionCPE
hordeingo_h3*cpe:2.3:a:horde:ingo_h3:*:*:*:*:*:*:*:*

Related

gentoo 1
nessus 4
openvas 6
cvelist 1
osv 1
nvd 1
debian 1
freebsd 1
securityvulns 1
ubuntucve 1
gentoo
gentoo
Ingo H3: Folder name shell command injection
2006-11-27 00:00:00
nessus
nessus
GLSA-200611-22 : Ingo H3: Folder name shell command injection
2006-11-27 00:00:00
FreeBSD : ingo -- local arbitrary shell command execution (18a14baa-5ee5-11db-ae08-0008743bf21a)
2006-10-20 00:00:00
Ingo Foldername Arbitrary Command Execution
2006-10-20 00:00:00
openvas
openvas
Debian Security Advisory DSA 1204-1 (ingo1)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1204-1)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200611-22 (horde-ingo)
2008-09-24 00:00:00
cvelist
cvelist
CVE-2006-5449
2006-10-23 17:00:00
osv
osv
ingo1
2006-11-02 00:00:00
nvd
nvd
CVE-2006-5449
2006-10-23 17:07:00
debian
debian
[SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution
2006-11-02 23:46:19
freebsd
freebsd
ingo -- local arbitrary shell command execution
2006-10-18 00:00:00
securityvulns
securityvulns
[Full-disclosure] [SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution
2006-11-03 00:00:00
ubuntucve
ubuntucve
CVE-2006-5449
2006-10-23 00:00:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.006

Percentile

78.2%

JSON
Related for CVE-2006-5449
gentoo1nessus4openvas6cvelist1osv1nvd1debian1freebsd1securityvulns1ubuntucve1