Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PERL-MailTools远程命令执行漏洞
Vulnerability Description
Mail::Mailer是Mailtool套件的一部分，作为PERL模块用于处理邮件。 由于传递给mailx mailer的用户输入缺少正确检查，远程攻击者可以利用这个漏洞传递SHELL元字符而以mailx进程在系统上执行任意命令。 SuSE安全小组在Mail::Mailer包中发现一个安全漏洞，允许远程攻击者在部分环境下执行任意命令。这是由于Mailx使用的mailer允许在邮件体中嵌入命令，由于对嵌入的命令检查不充分，远程攻击者可以提交包含SHELL元字符的命令给Mail:Mailer模块处理，可导致
CVSS Information
N/A
Vulnerability Type
N/A