ingo1: missing input sanitizing
| Package(s): | ingo1 | CVE #(s): | CVE-2006-5449 | ||||||||
| Created: | November 3, 2006 | Updated: | November 27, 2006 | ||||||||
| Description: | It was discovered that the Ingo email filter rules manager performs insufficient escaping of user-provided data in created procmail rules files, which allows the execution of arbitrary shell commands. | ||||||||||
| Alerts: |
| ||||||||||