Usermin mail module flaws allow command execution, file overwrite and script injection
Usermin webmail tool lets attackers hack the server through mail.
Summary
The mail feature of the Usermin webmail tool has several security flaws. A logged-in user can run commands on the server through IMAP folder names, and an outside attacker can overwrite server files or inject scripts through email attachments and links.
Affected when
- Read Mail module enabled
- IMAP-mode mail server (mail_system 4)
What to do
No source names a fixed version. Versions through 2.570 are affected, so check that the running Usermin is newer than 2.570 and read the Webmin official advisory.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab) · hackmd.io (opens in a new tab) · vulncheck.com (opens in a new tab) · github.com (opens in a new tab) · vulncheck.com (opens in a new tab) · github.com (opens in a new tab) · vulncheck.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)
Times
First published
First seen