CVE-2005-1960 - The getemails function in C.J

Back Back to CVE browser

HIGH

The getemails function in C.J

Published Jun 14, 2005

7.5

HIGH

CVSS 2.0

EPSS 1.83%

Description

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://secunia.com/advisories/15582
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html
mailing-listx_refsource_BUGTRAQVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/15582		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html		mailing-listx_refsource_BUGTRAQVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 14, 2005

Updated Sep 17, 2024

Reserved Jun 14, 2005

Link CVE-2005-1960

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-1960

Red Hat

Severity n/a

Public date n/a

Links CVE-2005-1960