Description
Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Openfind Mail2000 V7.0
Default version status: unaffected
Patch 55 to < Patch 124affected
Openfind Mail2000 V8.0
Default version status: unaffected
earlier to < Patch 31affected