Vulnerability Description
The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing "-X/path/to/wwwroot/file.php."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zetacomponents | < 1.8.2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/101866Third Party AdvisoryVDB Entry
- https://github.com/zetacomponents/Mail/issues/58Issue TrackingThird Party Advisory
- https://github.com/zetacomponents/Mail/releases/tag/1.8.2Issue TrackingRelease NotesThird Party Advisory
- https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-critical-rce-vulnerabIssue TrackingThird Party Advisory
- https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-yuan-cheng-dai-ma-zhiIssue TrackingThird Party Advisory
- https://www.exploit-db.com/exploits/43155/Issue TrackingThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/101866Third Party AdvisoryVDB Entry
- https://github.com/zetacomponents/Mail/issues/58Issue TrackingThird Party Advisory
- https://github.com/zetacomponents/Mail/releases/tag/1.8.2Issue TrackingRelease NotesThird Party Advisory
- https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-critical-rce-vulnerabIssue TrackingThird Party Advisory
- https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-yuan-cheng-dai-ma-zhiIssue TrackingThird Party Advisory
- https://www.exploit-db.com/exploits/43155/Issue TrackingThird Party AdvisoryVDB Entry
FAQ
What is CVE-2017-15806?
CVE-2017-15806 is a vulnerability with a CVSS score of 8.1 (HIGH). The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remo...
How severe is CVE-2017-15806?
CVE-2017-15806 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-15806?
Check the references section above for vendor advisories and patch information. Affected products include: Zetacomponents Mail.