NetSight
high7.2

CVE-2002-0532

EMU Webmail allows local users to execute arbitrary programs via a ..

Impact

EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.

Affected products

VendorProductAffected versions
EmumailEmumail
Version 3.0
EmumailEmumail Red Hat Linux
Versions 5.0, 5.1
EmumailEmumail Unix
Versions 5.0, 5.1

References