CVE-2017-5613

Description

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file.

References

https://news.cpanel.com/tsr-2017-0001-full-disclosure/

http://www.securityfocus.com/bid/95870

http://www.openwall.com/lists/oss-security/2017/01/28/8

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3