PHPMailer命令注入漏洞(CVE-2016-10033)

详细信息

漏洞类型

其他

漏洞描述

PHPMailer是一个用于发送电子邮件的PHP类库。 PHPMailer 5.2.18之前的版本 class.phpmailer.php 脚本中的 mail()函数存在命令注入漏洞，该漏洞源于程序没有设置Sender属性，允许远程攻击者将额外参数传递给mail命令，从而通过构建的Sender属性中的 \“(反斜杠双引号)执行任意代码。如果攻击尝试失败，将导致拒绝服务条件。

修复建议

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18 https://github.com/phpmailer/phpmailer/commit/ed4e7ce8ad877a8f578139c491c256ab1933c7c9

参考链接

• http://packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html

  OSV · x_refsource_MISC

• http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html

  OSV · x_refsource_MISC

• http://seclists.org/fulldisclosure/2016/Dec/78

  OSV · mailing-list · x_refsource_FULLDISC

• http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection

  OSV · x_refsource_MISC

• http://www.securityfocus.com/archive/1/539963/100/0/threaded

  OSV

• http://www.securityfocus.com/bid/95108

  OSV

• http://www.securitytracker.com/id/1037533

  OSV

• https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html

  OSV · x_refsource_CONFIRM

• https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2016-10033.yaml

  OSV

• https://github.com/PHPMailer/PHPMailer

  OSV

• https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18

  OSV · x_refsource_CONFIRM

• https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-5f37-gxvh-23v6

  OSV

• https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities

  OSV · x_refsource_CONFIRM

• https://github.com/advisories/GHSA-5f37-gxvh-23v6

  GitHub

• https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html

  OSV · x_refsource_MISC

• https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html

  OSV

• https://nvd.nist.gov/vuln/detail/CVE-2016-10033

  OSV

• https://osv.dev/vulnerability/CVE-2016-10033

  OSV

• https://osv.dev/vulnerability/DLA-770-1

  OSV

• https://osv.dev/vulnerability/DSA-3750-1

  OSV

• https://osv.dev/vulnerability/GHSA-5f37-gxvh-23v6

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10033

  OSV

• https://security-tracker.debian.org/tracker/CVE-2016-10033

  OSV

• https://security.alpinelinux.org/vuln/CVE-2016-10033

  OSV

• https://ubuntu.com/security/CVE-2016-10033

  OSV

• https://ubuntu.com/security/notices/USN-5956-1

  OSV

• https://www.cve.org/CVERecord?id=CVE-2016-10033

  OSV

• https://www.drupal.org/psa-2016-004

  OSV · x_refsource_CONFIRM

• https://www.exploit-db.com/exploits/40968/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.exploit-db.com/exploits/40969/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.exploit-db.com/exploits/40970/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.exploit-db.com/exploits/40974/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.exploit-db.com/exploits/40986/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.exploit-db.com/exploits/41962/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.exploit-db.com/exploits/41996/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.exploit-db.com/exploits/42024/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.exploit-db.com/exploits/42221/

  OSV · exploit · x_refsource_EXPLOIT-DB

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://osv.dev/vulnerability/DEBIAN-CVE-2016-10033

  OSV

• https://osv.dev/vulnerability/ALPINE-CVE-2016-10033

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-10033

  NVD · US Government Resource

• https://www.exploit-db.com/exploits/42221

  OSV · Third Party Advisory · Exploit · VDB Entry

• https://www.exploit-db.com/exploits/42024

  OSV · Third Party Advisory · Exploit · VDB Entry

• https://www.exploit-db.com/exploits/41996

  OSV · Third Party Advisory · Exploit · VDB Entry

• https://www.exploit-db.com/exploits/41962

  OSV · Third Party Advisory · Exploit · VDB Entry

• https://www.exploit-db.com/exploits/40986

  OSV · Third Party Advisory · Exploit · VDB Entry

• https://www.exploit-db.com/exploits/40974

  OSV · Third Party Advisory · Exploit · VDB Entry

• https://www.exploit-db.com/exploits/40970

  OSV · Patch · Third Party Advisory · Exploit · VDB Entry

• https://www.exploit-db.com/exploits/40969

  OSV · Third Party Advisory · Exploit · VDB Entry

• https://www.exploit-db.com/exploits/40968

  OSV · Patch · Third Party Advisory · Exploit · VDB Entry