CVE-2005-1960

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.

Score
CVSS 2.0 7.5 High
Status
Modified - cve@mitre.org
Published
2005-06-08
Last modified
2024-09-17

References