Vulnerabilities > CVE-2004-1993 - Remote Command Execution Variant vulnerability in Omail Webmail 0.97.3/0.98.3/0.98.5
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |