CVE-2006-1251 Command injection in n/a
Remote attackers can delete arbitrary files on Exim mail servers using sa-exim by sending emails with crafted To fields, leading to data loss or service disruption.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-1251?
CVE-2006-1251 is a medium-severity command injection vulnerability in n/a, published on 19 Mar 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command.
Weakness: CWE-94
Which versions are affected by CVE-2006-1251?
It affects 1 product.
Products include Sa-Exim Sa-Exim.
How do I fix CVE-2006-1251?
Upgrade to a fixed version.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2006-1251 being exploited?
There is no known exploitation of CVE-2006-1251 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2006-1251, GHSA-m67m-57fm-4w9h.