Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMUMail HTTP HOST任意配置文件可装载漏洞
Vulnerability Description
Emumail是一款Emumail公司维护和发行的WEB邮件服务程序，可使用在Linux、Unix和Windows操作系统下。 Emumail对环境变量'HTTP_HOST'处理存在漏洞，可导致本地用户获得httpd进程的权限。攻击者可以在本地系统上建立一个文件，通过连接WEB服务程序并提供特殊的HTTP HOST环境变量值给Emumail系统，可导致程序强迫打开攻击者指定的文件，造成文件以httpd进程的权限执行。
CVSS Information
N/A
Vulnerability Type
N/A