CVE-2005-0239

viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• S Mime Plugin (Squirrelmail)

References

• http://www.idefense.com/application/poi/display?id=191&type=vulnerabilities&flashstatus=false
• http://www.kb.cert.org/vuls/id/502328
• http://www.squirrelmail.org/plugin_view.php?id=54
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19242