ByteOS Network

NVD Vulnerability Details :

CVE-2007-3778

Modified

Source-cve@mitre.org

Published At-15 Jul, 2007 | 22:30

Updated At-29 Jul, 2017 | 01:32

The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php. NOTE: a parameter value can be set in the contents of an e-mail message.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

SquirrelMail

>>gpg_plugin>>2.0

cpe:2.3:a:squirrelmail:gpg_plugin:2.0:*:*:*:*:*:*:*

SquirrelMail

>>gpg_plugin>>2.1_dev

cpe:2.3:a:squirrelmail:gpg_plugin:2.1_dev:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=330	cve@mitre.org	Patch
http://lists.immunitysec.com/pipermail/dailydave/2007-July/004452.html	cve@mitre.org	N/A
http://lists.immunitysec.com/pipermail/dailydave/2007-July/004456.html	cve@mitre.org	N/A
http://osvdb.org/37931	cve@mitre.org	N/A
http://secunia.com/advisories/26035	cve@mitre.org	Vendor Advisory
http://www.attrition.org/pipermail/vim/2007-July/001704.html	cve@mitre.org	N/A
http://www.attrition.org/pipermail/vim/2007-July/001710.html	cve@mitre.org	N/A
http://www.securityfocus.com/bid/24874	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/2513	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/35363	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History