CVE-2007-2173

Published: Apr 24, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP before 4.0.6-r2, and 4.1.x before 4.1.2-r1, on Gentoo Linux allows remote attackers to execute arbitrary commands via the XMAILDIR variable, related to the LOGINRUN variable.

Affected (8)

Products: Double Precision Incorporated: Courier Imap

Double Precision Incorporated

1 product

Courier Imap

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Double Precision Incorporated Courier Imap	Version 4.0.0
Double Precision Incorporated Courier Imap	Version 4.0.1
Double Precision Incorporated Courier Imap	Version 4.0.2
Double Precision Incorporated Courier Imap	Version 4.0.3
Double Precision Incorporated Courier Imap	Version 4.0.4
Double Precision Incorporated Courier Imap	Version 4.0.5
Double Precision Incorporated Courier Imap	Version 4.1.0
Double Precision Incorporated Courier Imap	Version 4.1.1