« Volver al listado

CVE-2002-1271

Estado: ModificadaAlta (7.5)—

The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Perl-mailtools — Perl-mailtools

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-1271",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-11-12T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=103659723101369&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=103679569705086&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2003/dsa-386",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/10548.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/6104",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=103659723101369&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=103679569705086&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2003/dsa-386",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/10548.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/6104",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx."
    },
    {
      "lang": "es",
      "value": "El módulo Perl Mail:Mailer en el paquete perl-MailTools 1.47 y anteriores usa mailx como el programa de correo por defecto, lo que permite a atacantes remotos ejecutar comandos arbitrarios insertándolos en el cuerpo del correo, que es entonces procesado por mailx"
    }
  ],
  "lastModified": "2026-06-16T21:59:02.240",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:perl-mailtools:perl-mailtools:1.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F446784D-59F7-4858-BF72-DE9A2D837D45"
            },
            {
              "criteria": "cpe:2.3:a:perl-mailtools:perl-mailtools:1.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "133D4BBA-61B9-44BB-BAEC-7F1441740037"
            },
            {
              "criteria": "cpe:2.3:a:perl-mailtools:perl-mailtools:1.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C63A8E95-BE64-4DDB-A39D-8BD8D1986925"
            },
            {
              "criteria": "cpe:2.3:a:perl-mailtools:perl-mailtools:1.42:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71782033-9DC6-4924-89C7-9710CA039ED7"
            },
            {
              "criteria": "cpe:2.3:a:perl-mailtools:perl-mailtools:1.44:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67991634-AFA2-4D89-9AEA-AF344838C6C7"
            },
            {
              "criteria": "cpe:2.3:a:perl-mailtools:perl-mailtools:1.47:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF573852-B0CF-45F7-A537-50F7F561CA18"
            },
            {
              "criteria": "cpe:2.3:a:perl-mailtools:perl-mailtools:1.1401:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43E30E82-3C7D-404A-A30B-308E1EF1E9E9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}