CVE-2013-6830

Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure versions 3.70 and earlier

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation in the admin/confnetworking.html page.

Recommendations For PineApp Mail-SeCure versions 3.70 and earlier, avoid using the nsserver parameter in the admin/confnetworking.html page until the issue is resolved. As a temporary workaround, consider restricting access to the admin/confnetworking.html page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.