Description
Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Openfind MailGates 5.0
Default version status: unaffected
earlier to < Patch 5.2.10.094affected
Openfind MailAudit 5.0
Default version status: unaffected
earlier to < Patch 5.2.10.094affected
Openfind MailGates 6.0
Default version status: unaffected
earlier to < Patch 6.1.7.037affected
Openfind MailAudit 6.0
Default version status: unaffected
earlier to < Patch 6.1.7.037affected