Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mgetty 命令注入漏洞
Vulnerability Description
mgetty是一款getty的替代程序，用于数据和传真操作。 mgetty 1.2.1之前版本中的faxrec.c文件存在命令注入漏洞，该漏洞源于在‘fax_notify_mail()’函数中，程序没有过滤‘mail_to’参数。攻击者可利用该漏洞提升权限。
CVSS Information
N/A
Vulnerability Type
N/A