CVE-2006-1251

sa-exim 4.2 - Arbitrary File Deletion via Unquoted To Field in greylistclean.cron

Title source: llm

Description

Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/25286

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/0941

Issue Tracking x_refsource_misc

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345071

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19225

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/17110

Patch x_refsource_confirm

http://marc.merlins.org/linux/exim/files/sa-exim-cvs/Changelog.html

Scores

EPSS 0.0149

EPSS Percentile 71.0%

Details

CWE

CWE-94

Status published

Products (3)

sa-exim/sa-exim 4.0

sa-exim/sa-exim 4.1

sa-exim/sa-exim 4.2

Published Mar 19, 2006

Tracked Since Feb 18, 2026