CVE-2005-1924
CVE-2005-1924
The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php, and (c) keyring_main.php; and (2) the keyserver parameter to the gpg_recv_key function in gpg_key_functions.php, as called by gpg_options.php. NOTE: this issue may overlap CVE-2007-3636.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/4718unverifiedcve_referencewww.exploit-db.com/exploits/4173unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=329http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=331http://osvdb.org/37923http://osvdb.org/37924http://secunia.com/advisories/26035http://secunia.com/advisories/26424http://security.gentoo.org/glsa/glsa-200708-08.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/35355https://exchange.xforce.ibmcloud.com/vulnerabilities/35364https://www.exploit-db.com/exploits/4173http://www.attrition.org/pipermail/vim/2007-July/001710.htmlhttp://www.securityfocus.com/archive/1/473370/100/0/threaded