https://bugzilla.redhat.com/show_bug.cgi?id=1267938
Bug ID: 1267938
Summary: apache-james-project: arbitrary command execution for
servers configured with file based user repositories
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: mprpic(a)redhat.com
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com
A flaw was found in Apache James Server:
Apache James Server 2.3.2 has security issue that can let a user execute
arbitrary system command for servers configured with file based user
repositories.
2.3.2 users should upgrade to 2.3.2.1 to be downloaded from
http://james.apache.org/download.cgi#Apache_James_Server
References:
http://seclists.org/oss-sec/2015/q3/655
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=sWoL6CFj2I&a=cc_unsubscribe