Back to CVE Browser

CVE-2003-0990

HIGH

7.5

CVSS Severity Score

EPSS Score0.0870%

EPSS Percentile37.17th

PublishedJan 20, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107247236124180&w=2

🔗 http://www.bugtraq.org/advisories/_BSSADV-0001.txt

🔗 http://www.securityfocus.com/archive/1/348366

🔗 http://www.securityfocus.com/bid/9296

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/14079

🔗 http://marc.info/?l=bugtraq&m=107247236124180&w=2

🔗 http://www.bugtraq.org/advisories/_BSSADV-0001.txt

🔗 http://www.securityfocus.com/archive/1/348366

Related Vulnerabilities

CVE-2003-109010.0

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

CVE-2003-019610.0

Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2003-030410.0

one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the inst...

CVE-2003-016110.0

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions ...

CVE-2003-0990 Detail & Impact Analysis | CVSS 7.5 (HIGH) | Cyber-Sec.Space | Cyber-Sec.Space