HGiga iSherlock OS Command Injection Vulnerability

A command injection vulnerability has been identified in iSherlock versions 4.5 and 5.5, including the components MailSherlock, SpamSherlock, and AuditSherlock. This vulnerability allows unauthenticated remote attackers to inject and execute arbitrary operating system commands on the server.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the server, potentially leading to a full system compromise.

Remediation

Users can update to iSherlock-smtp-4.5 and iSherlock-smtp-5.5 versions 774 and later, or to iSherlock-base-4.5 and iSherlock-base-5.5 versions 440 and later.