Vulnerabilities > Pineapp > Mail Secure 5099Sk

DATE CVE VULNERABILITY TITLE RISK
2013-11-20 CVE-2013-6831 Permissions, Privileges, and Access Controls vulnerability in Pineapp Mail-Secure 5099Sk
PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account.
local
low complexity
pineapp CWE-264
7.2
2013-11-20 CVE-2013-6830 Code Injection vulnerability in Pineapp Mail-Secure 5099Sk
admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation.
network
low complexity
pineapp CWE-94
7.5