CVE-2011-4542

Name of the Vulnerable Software and Affected Versions Hastymail2 version 2.1.1 before RC2

Description The issue allows remote attackers to execute arbitrary commands. This can be achieved via the rs or rsargs[] parameter in a mailbox Drafts action to the default URI.

Recommendations For Hastymail2 version 2.1.1 before RC2, consider updating to RC2 or a later version to resolve the issue. As a temporary workaround, restrict access to the mailbox Drafts action and avoid using the rs and rsargs[] parameters in the default URI until the issue is resolved.