{"id":6275,"date":"2017-01-23T14:07:58","date_gmt":"2017-01-23T22:07:58","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/01\/23\/news-126\/"},"modified":"2017-01-23T14:07:58","modified_gmt":"2017-01-23T22:07:58","slug":"news-126","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/01\/23\/news-126\/","title":{"rendered":"SSD Advisory \u2013 SwiftMailer Remote Code Execution"},"content":{"rendered":"
\n

Vulnerability Summary<\/strong>
The following report describes a remote code execution vulnerability found in SwiftMailer. The vulnerability allows an attacker injecting sendmail program<\/em> due to insufficient address sanitization. Swift Mailer integrates into any web app written in PHP 5, offering a flexible object-oriented approach to sending emails with a multitude of features<\/p>\n

Credit<\/strong>
An independent security researcher Dawid Golunski (https:\/\/legalhackers.com\/) has reported this vulnerability to Beyond Security\u2019s SecuriTeam Secure Disclosure program<\/p>\n

Vulnerability Details<\/strong><\/p>\n

When using SwitMailer to send emails with Sendmail transport, a malicious user might be able to inject arbitrary parameters to sendmail program<\/em> due to insufficient address sanitization. If an attacker can control email headers , he could bypass sanitization by adding additional quote characters within a malicious email address. <\/p>\n

Prof of Concept<\/strong><\/p>\n<\/p>\n

\t\t<\/p>\n

\n
<\/span> \t\t\t<\/p>\n
\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n