acmailer and acmailer DB OS Command Injection Vulnerability

A command injection vulnerability has been identified in acmailer CGI versions through 4.0.3 and acmailer DB versions through 1.1.5. This vulnerability allows attackers to execute arbitrary operating system commands on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of OS commands, potentially allowing an attacker to access or modify sensitive information, such as email lists and login credentials.

Remediation

Users are advised to update acmailer CGI to version 4.0.4 or later and acmailer DB to version 1.1.6 or later. Instructions for downloading these versions are available on the acmailer website.