CVE-2016-1000282

Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-02-05

Last modified

2024-08-06

Weaknesses

CWE-77

Affected products

• Haraka (Haraka Project)

References

• https://github.com/outflanknl/Exploits/blob/master/harakiri-CVE-2016-1000282.py