oss-sec mailing list archives

roundcube code execution via mail()

From: Hanno Böck <hanno () hboeck de>
Date: Thu, 8 Dec 2016 10:50:40 +0100

Hi,

This looks rather serious:
https://blog.ripstech.com/2016/roundcube-command-execution-via-email/

Upstream:
https://roundcube.net/news/2016/11/28/updates-1.2.3-and-1.1.7-released

-- 
Hanno Böck
https://hboeck.de/

mail/jabber: hanno () hboeck de
GPG: FE73757FA60E4E21B937579FA5880072BBB51E42

Current thread:

roundcube code execution via mail() Hanno Böck (Dec 08)
- Re: roundcube code execution via mail() cve-assign (Dec 08)