Apache James Server System Command Execution Vulnerability (CVE-2015-7611)

Apache James Server System Command Execution Vulnerability (CVE-2015-7611)
Apache James Server System Command Execution Vulnerability (CVE-2015-7611)

Release date:
Updated on:

Affected Systems:

Apache Group James 2.3.2

Description:

CVE (CAN) ID: CVE-2015-7611

Apache James is a Java-only SMTP and POP3 mail server and NNTP news server.

Apache James Server 2.3.2, Which is configured with a file-based user library, allows attackers to execute arbitrary system commands.

<* Source: Jakub. Palaczynski
*>

Suggestion:

Vendor patch:

Apache Group
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://blogs.apache.org/james/entry/apache_james_server_2_3

This article permanently updates the link address: