NetSight
high7.5

CVE-2004-0324

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or …

Impact

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.

Affected products

VendorProductAffected versions
ConfirmConfirm
Versions 0.50, 0.51, 0.52, 0.53, 0.54, 0.55

References