CVE-2017-15806

    Dashboard / Vulnerabilities / CVE-2017-15806

    CVE-2017-15806

    Published: 15 Nov 2017Last Modified: 8 Jul 2026

    Summary:

    Details: The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing "-X/path/to/wwwroot/file.php."

    References: http://www.securityfocus.com/bid/101866, https://github.com/zetacomponents/Mail/issues/58, https://github.com/zetacomponents/Mail/releases/tag/1.8.2, https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-critical-rce-vulnerability/, https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-yuan-cheng-dai-ma-zhi-xing-lou-dong/, https://www.exploit-db.com/exploits/43155/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -b55dc8e88cf14c8386c77374deb460be21ae6143

    Affected versions

    1.8.1
    1.8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High