On 18.12.2002 18:37:59 Dmitry Guyvoronsky wrote:
> Software : Openwebmail (http://openwebmail.org)
> Version : ?.?? -> 1.71 (current)
> Type : Arbitrary commands execution
> Remote : yes
> Root : yes (!!!)
> Date : December 18, 2002
> IV. RECOMENDATIONS
>
> Temporary disable usi
Hello
Vendor of the OpenWebMail system had released patch and upgraded
`current` sources.
More information can be found at:
http://sourceforge.net/forum/forum.php?thread_id=782605&forum_id=108435
Patches: http://openwebmail.org/openwebmail/download/cert/patches/SA-02:01/
Current: http://op
-BEGIN PGP SIGNED MESSAGE-
Hash: MD5
Security Advisory 12.18.02
Software : Openwebmail (http://openwebmail.org)
Version : ?.?? -> 1.71 (current)
Type : Arbitrary commands execution
Remote : yes
Root : yes (!!!)
Date : December 18, 2002
I. BACKGROUND
Openwebmail is a web-