From ae77a34aebf49e4db3a4066fa56cd51fca76d840 Mon Sep 17 00:00:00 2001 From: Kurt Seifried Date: Mon, 4 Feb 2019 11:38:47 -0700 Subject: [PATCH 1/2] CVE-2016-1000282 --- 2016/1000xxx/CVE-2016-1000282.json | 1 + 1 file changed, 1 insertion(+) create mode 100644 2016/1000xxx/CVE-2016-1000282.json diff --git a/2016/1000xxx/CVE-2016-1000282.json b/2016/1000xxx/CVE-2016-1000282.json new file mode 100644 index 00000000000..4b4451ed922 --- /dev/null +++ b/2016/1000xxx/CVE-2016-1000282.json @@ -0,0 +1 @@ +{"data_version":"4.0","references":{"reference_data":[{"url":"https://github.com/outflanknl/Exploits/blob/master/harakiri-CVE-2016-1000282.py"}]},"description":{"description_data":[{"lang":"eng","value":"Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions before 2.8.8 and earlier can be vulnerable to command injection."}]},"data_type":"CVE","affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"version":{"version_data":[{"version_value":"2.8.8"}]},"product_name":"Haraka"}]},"vendor_name":"Haraka"}]}},"CVE_data_meta":{"DATE_ASSIGNED":"2019-02-04T11:22:33","DATE_REQUESTED":"2019-02-04T11:22:33","ID":"CVE-2016-1000282","ASSIGNER":"kurt@seifried.org","REQUESTER":"kurt@seifried.org"},"data_format":"MITRE","problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Input Validation"}]}]}} From 7255e9c9a42536438c77c45b4be9ab9b23fd8167 Mon Sep 17 00:00:00 2001 From: Kurt Seifried Date: Mon, 4 Feb 2019 17:46:43 -0700 Subject: [PATCH 2/2] corrected sentence --- 2016/1000xxx/CVE-2016-1000282.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/2016/1000xxx/CVE-2016-1000282.json b/2016/1000xxx/CVE-2016-1000282.json index 4b4451ed922..b8f76de800c 100644 --- a/2016/1000xxx/CVE-2016-1000282.json +++ b/2016/1000xxx/CVE-2016-1000282.json @@ -1 +1 @@ -{"data_version":"4.0","references":{"reference_data":[{"url":"https://github.com/outflanknl/Exploits/blob/master/harakiri-CVE-2016-1000282.py"}]},"description":{"description_data":[{"lang":"eng","value":"Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions before 2.8.8 and earlier can be vulnerable to command injection."}]},"data_type":"CVE","affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"version":{"version_data":[{"version_value":"2.8.8"}]},"product_name":"Haraka"}]},"vendor_name":"Haraka"}]}},"CVE_data_meta":{"DATE_ASSIGNED":"2019-02-04T11:22:33","DATE_REQUESTED":"2019-02-04T11:22:33","ID":"CVE-2016-1000282","ASSIGNER":"kurt@seifried.org","REQUESTER":"kurt@seifried.org"},"data_format":"MITRE","problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Input Validation"}]}]}} +{"data_version":"4.0","references":{"reference_data":[{"url":"https://github.com/outflanknl/Exploits/blob/master/harakiri-CVE-2016-1000282.py"}]},"description":{"description_data":[{"lang":"eng","value":"Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection."}]},"data_type":"CVE","affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"version":{"version_data":[{"version_value":"2.8.8"}]},"product_name":"Haraka"}]},"vendor_name":"Haraka"}]}},"CVE_data_meta":{"DATE_ASSIGNED":"2019-02-04T11:22:33","DATE_REQUESTED":"2019-02-04T11:22:33","ID":"CVE-2016-1000282","ASSIGNER":"kurt@seifried.org","REQUESTER":"kurt@seifried.org"},"data_format":"MITRE","problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Input Validation"}]}]}}