CVE-2002-1771

UNKNOWN

Matt Wright FormMail 1

Published Jun 21, 2005

Modified 1 years ago

Details

Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.

References

WEB

http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html

WEB

http://www.scriptarchive.com/readme/formmail.html#history

WEB

http://www.securityfocus.com/bid/3955

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/8013

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2002-1771

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedJun 21, 2005

ModifiedAug 8, 2024