CVE-2016-10033
CVE-2016-10033
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.
CVSS 9.8 · Crítica · EPSS 99,7% · En el catálogo KEV · Código de explotación público · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · php
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
libphp-phpmailer Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.2.14+dfsg-2.1
Actualiza a 5.2.14+dfsg-2.1
libphp-phpmailer Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.2.14+dfsg-2.1
Actualiza a 5.2.14+dfsg-2.1
libphp-phpmailer Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.2.14+dfsg-2.1
Actualiza a 5.2.14+dfsg-2.1
phpmailer/phpmailer Packagist
- Versiones
- v5.2.10
- v5.2.11
- v5.2.12
- v5.2.13
- v5.2.14
- v5.2.15
- v5.2.16
- v5.2.17
- v5.2.2
- v5.2.4
- v5.2.5
- v5.2.6
- v5.2.7
- v5.2.8
- v5.2.9
- Intervalos de versiones afectados
- ECOSYSTEM: ≥ 5.0.0, < 5.2.18
Actualiza a 5.2.18
libphp-phpmailer Ubuntu:Pro:16.04:LTS
- Versiones
- 5.2.10+dfsg-1
- 5.2.14+dfsg-1
- 5.2.14+dfsg-1build1
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.2.14+dfsg-1ubuntu0.1~esm1
Actualiza a 5.2.14+dfsg-1ubuntu0.1~esm1
Fuentes originales
- http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html
- https://www.drupal.org/psa-2016-004
- https://www.exploit-db.com/exploits/42221/
- https://www.exploit-db.com/exploits/40969/
- https://www.exploit-db.com/exploits/41962/
- https://www.exploit-db.com/exploits/40968/
- https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html
- https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18
- http://www.securityfocus.com/archive/1/539963/100/0/threaded
- https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities
- http://packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/40974/
- https://www.exploit-db.com/exploits/40986/
- https://www.exploit-db.com/exploits/40970/
- http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection
- https://www.exploit-db.com/exploits/41996/
- http://seclists.org/fulldisclosure/2016/Dec/78
- http://www.securityfocus.com/bid/95108
- http://www.securitytracker.com/id/1037533
- https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html
- https://www.exploit-db.com/exploits/42024/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-10033
- https://nvd.nist.gov/vuln/detail/CVE-2016-10033