CVE-2018-16741

HIGH

mgetty < 1.2.1 - OS Command Injection via FaxQ-Helper Activate Command

Title source: llm
STIX 2.1

Description

An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell metacharacters to prevent command injection. It is possible to use the ||, &&, or > characters within a file created by the "faxq-helper activate <jobid>" command.

References (3)

Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4291
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/09/msg00012.html

Scores

CVSS v3 7.8
EPSS 0.0132
EPSS Percentile 67.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (3)
debian/debian_linux 8.0
debian/debian_linux 9.0
mgetty_project/mgetty < 1.2.1
Published Sep 13, 2018
Tracked Since Feb 18, 2026