Description
Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Email Security Gateway | Libraesva / Email Security Gateway | >= 4.5, < 5.0.31 | affected |
| Email Security Gateway | Libraesva / Email Security Gateway | >= 5.1, < 5.1.20 | affected |
| Email Security Gateway | Libraesva / Email Security Gateway | >= 5.2, < 5.2.31 | affected |
| Email Security Gateway | Libraesva / Email Security Gateway | >= 5.3, < 5.4.8 | affected |
| Email Security Gateway | Libraesva / Email Security Gateway | >= 5.5, < 5.5.7 | affected |