CVE-2018-16744

Name of the Vulnerable Software and Affected Versions mgetty versions prior to 1.2.1

Description An issue was discovered where the mail to parameter in the fax notify mail() function is not sanitized, potentially allowing for command injection if untrusted input can reach it due to the use of popen.

Recommendations For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the fax notify mail() function to minimize the risk of exploitation. Avoid using untrusted input for the mail to parameter until the issue is resolved.