CVE-2017-9801 (GCVE-0-2017-9801)

Vulnerability from cvelistv5 – Published: 2017-08-07 15:00 – Updated: 2024-09-16 19:05
VLAI?
Summary
When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.
Severity ?
No CVSS data available.
CWE
  • SMTP header injection
Assigner
References
https://lists.apache.org/thread.html/7ef903a772a2… mailing-listx_refsource_MLIST
http://www.securitytracker.com/id/1039043 vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/100082 vdb-entryx_refsource_BID
Impacted products
Vendor Product Version
Apache Software Foundation Apache Commons Email Affected: 1.0 to 1.4
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:18:02.211Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[announce@apache.org] 20170801 CVE-2017-9801: Apache Commons Email SMTP header injection vulnerabilty",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5%40%3Cannounce.apache.org%3E"
          },
          {
            "name": "1039043",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039043"
          },
          {
            "name": "100082",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100082"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Apache Commons Email",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.0 to 1.4"
            }
          ]
        }
      ],
      "datePublic": "2017-08-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "SMTP header injection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-08T09:57:01",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "name": "[announce@apache.org] 20170801 CVE-2017-9801: Apache Commons Email SMTP header injection vulnerabilty",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5%40%3Cannounce.apache.org%3E"
        },
        {
          "name": "1039043",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039043"
        },
        {
          "name": "100082",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100082"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@apache.org",
          "DATE_PUBLIC": "2017-08-01T00:00:00",
          "ID": "CVE-2017-9801",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Apache Commons Email",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.0 to 1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apache Software Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "SMTP header injection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[announce@apache.org] 20170801 CVE-2017-9801: Apache Commons Email SMTP header injection vulnerabilty",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5@%3Cannounce.apache.org%3E"
            },
            {
              "name": "1039043",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039043"
            },
            {
              "name": "100082",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100082"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2017-9801",
    "datePublished": "2017-08-07T15:00:00Z",
    "dateReserved": "2017-06-21T00:00:00",
    "dateUpdated": "2024-09-16T19:05:37.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:commons_email:1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"30F19A6E-9804-46E5-BB19-D68FD7151A08\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:commons_email:1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A4F3451B-7369-45FA-AAA7-BD5DFF71595B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:commons_email:1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"46162757-2BEB-4AE3-8C87-72605B9EF048\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:commons_email:1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7771B984-C576-4E86-8A33-A6C0D87ABE42\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:commons_email:1.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"58C4BCC5-676C-4CEC-9917-16ACF9E4CB0C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:commons_email:1.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ECF0651E-705F-4E15-A4C2-FA074002858C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:commons_email:1.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C31A98B-BBC5-4F26-B60F-399AFFA58C1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:commons_email:1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D8D2181B-15C0-4FDD-A881-AE400841B20A\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.\"}, {\"lang\": \"es\", \"value\": \"Cuando un sitio de llamada pasa un asunto para un email que contiene saltos de l\\u00ednea en Apache Commons Email 1.0 en su versi\\u00f3n 1.4, el autor de la llamada puede a\\u00f1adir encabezados SMTP arbitrarios.\"}]",
      "id": "CVE-2017-9801",
      "lastModified": "2024-11-21T03:36:53.093",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:P/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2017-08-07T15:29:00.517",
      "references": "[{\"url\": \"http://www.securityfocus.com/bid/100082\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1039043\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5%40%3Cannounce.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"http://www.securityfocus.com/bid/100082\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1039043\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5%40%3Cannounce.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "security@apache.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-9801\",\"sourceIdentifier\":\"security@apache.org\",\"published\":\"2017-08-07T15:29:00.517\",\"lastModified\":\"2025-04-20T01:37:25.860\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.\"},{\"lang\":\"es\",\"value\":\"Cuando un sitio de llamada pasa un asunto para un email que contiene saltos de l\u00ednea en Apache Commons Email 1.0 en su versi\u00f3n 1.4, el autor de la llamada puede a\u00f1adir encabezados SMTP arbitrarios.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:commons_email:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30F19A6E-9804-46E5-BB19-D68FD7151A08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:commons_email:1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4F3451B-7369-45FA-AAA7-BD5DFF71595B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:commons_email:1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46162757-2BEB-4AE3-8C87-72605B9EF048\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:commons_email:1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7771B984-C576-4E86-8A33-A6C0D87ABE42\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:commons_email:1.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58C4BCC5-676C-4CEC-9917-16ACF9E4CB0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:commons_email:1.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECF0651E-705F-4E15-A4C2-FA074002858C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:commons_email:1.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C31A98B-BBC5-4F26-B60F-399AFFA58C1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:commons_email:1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8D2181B-15C0-4FDD-A881-AE400841B20A\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/100082\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039043\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5%40%3Cannounce.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"http://www.securityfocus.com/bid/100082\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039043\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5%40%3Cannounce.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.