CVE-2006-5449: procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Oct 23, 2006

CVE-2006-5449

procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule

–

CVSS

4.1%

EPSS

No

On KEV

Description

procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule.

Exploitation

Is it being used?

Exploit prediction (EPSS)4.1% · higher than 91% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IH

Ingo H3 · Horde

through 1.1.1 · source: NVD

Affected product

IH

Ingo H3

Horde

All Ingo H3 CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2006-5449

https://www.cve.org/CVERecord?id=CVE-2006-5449

http://bugs.horde.org/ticket/?Horde=6ed1a009f3396864553976a45948339e&id=4513

http://lists.horde.org/archives/announce/2006/000296.html

http://secunia.com/advisories/22482

http://secunia.com/advisories/22656

http://secunia.com/advisories/23100

http://www.debian.org/security/2006/dsa-1204