Confirm Arbitrary Command Execution Vulnerability
SECUNIA ADVISORY ID:
SA10966
VERIFY ADVISORY:
http://secunia.com/advisories/10966/
CRITICAL:
Highly critical
IMPACT:
System access
WHERE:
From remote
SOFTWARE:
Confirm 0.x
DESCRIPTION:
Mariusz Woloszyn has discovered a vulnerability in Confirm, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an input validation error when processing information in mail headers. This can be exploited to execute arbitrary commands on a user's system with the user's privileges by including various meta characters in a mail header.
The vulnerability reportedly affects version 0.62 and prior.
SOLUTION:
Update to version 0.70:
http://hr.uoregon.edu/davidrl/confirm/confirm-0.70.tgz
PROVIDED AND/OR DISCOVERED BY:
Mariusz Woloszyn
For further details and links please click here to see the actual Secunia Advisory: http://secunia.com/advisories/10966/