Gentoo: GLSA-200611-22 Normal: Ingo H3 Shell Command Execution Risk
gentoo
November 27, 2006
Ingo H3 is vulnerable to arbitrary shell command execution when handling procmail rules.
Summary
Gentoo Linux Security Advisory GLSA 200611-22
https://security.gentoo.org/
Severity: Normal
Title: Ingo H3: Folder name shell command injection
Date: November 27, 2006
Bugs: #153927
ID: 200611-22
Synopsis
=======
Ingo H3 is vulnerable to arbitrary shell command execution when
handling procmail rules.
Background
=========
Ingo H3 is a generic frontend for editing Sieve, procmail, maildrop and
IMAP filter rules.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 www-apps/horde-ingo < 1.1.2 >= 1.1.2
==========
Ingo H3 fails to properly escape shell metacharacters in procmail
rules.
Impact
=====
A remote authenticated attacker could craft a malicious rule which
c...
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!