Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4478
HistoryDec 07, 2013 - 12:00 a.m.

CVE-2013-4478

2013-12-0700:00:00
ubuntu.com
ubuntu.com
6

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.021

Percentile

89.4%

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to
execute arbitrary commands via shell metacharacters in the filename of an
email attachment.

Bugs

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.021

Percentile

89.4%