HyperMail Remote Command Execution Vulnerability

Bugtraq ID:	3557
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 19 2001 12:00AM
Updated:	Nov 19 2001 12:00AM
Credit:	This vulnerability was submitted to BugTraq on November 19th, 2001 in a qDefense Advisory.
Vulnerable:	HyperMail HyperMail 2.1.3 - Apache Apache 1.3.22 - Apache Apache 1.3.20 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 HyperMail HyperMail 2.1.2 - Apache Apache 1.3.22 - Apache Apache 1.3.20 HyperMail HyperMail 2.1.1 - Apache Apache 1.3.22 - Apache Apache 1.3.20 HyperMail HyperMail 2.1 .0 - Apache Apache 1.3.22 - Apache Apache 1.3.20 HyperMail HyperMail 2.0 .0
Not Vulnerable:	HyperMail HyperMail 2.1.4

HyperMail Remote Command Execution Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HyperMail Remote Command Execution Vulnerability

Solution:
The vendor acknowledges this issue and has patched it in recent versions of HyperMail(2.1.3+).


HyperMail HyperMail 2.0 .0

• Hypermail hypermail-2.1.4.tar.gz
  http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz

HyperMail HyperMail 2.1 .0

• Hypermail hypermail-2.1.4.tar.gz
  http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz

HyperMail HyperMail 2.1.1

• Hypermail hypermail-2.1.4.tar.gz
  http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz

HyperMail HyperMail 2.1.2

• Hypermail hypermail-2.1.4.tar.gz
  http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz

HyperMail HyperMail 2.1.3

• Hypermail hypermail-2.1.4.tar.gz
  http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz

HyperMail Remote Command Execution Vulnerability

References:

• HyperMail Homepage (HyperMail)