• info
• discussion
• exploit
• solution
• references

Courier-IMAP XMAILDIR Shell Command Injection Vulnerability

Courier-IMAP is prone to a shell-command-injection vulnerability.

Commands executed through this vulnerability could permit an attacker to gain access to a vulnerable system.

Courier-IMAP versions for Gentoo prior to 4.0.6-r2 are vulnerable to this issue.