Security Advisories (1)
CVE-2002-1271 (2002-11-12)

The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.

NAME

Mail::Send - Simple electronic mail interface

SYNOPSIS

require Mail::Send;

$msg = new Mail::Send;

$msg = new Mail::Send Subject=>'example subject', To=>'timbo';

$msg->to('user@host');
$msg->subject('example subject');
$msg->cc('user@host');
$msg->bcc('someone@else');

$msg->set($header, @values);
$msg->add($header, @values);
$msg->delete($header);

# Launch mailer and set headers. The filehandle returned
# by open() is an instance of the Mail::Mailer class.
# Arguments to the open() method are passed to the Mail::Mailer
# constructor.

$fh = $msg->open;               # some default mailer
# $fh = $msg->open('sendmail'); # explicit

print $fh "Body of message";

$fh->close;         # complete the message and send it

$fh->cancel;        # not yet implemented

DESCRIPTION

SEE ALSO

Mail::Mailer

AUTHORS

Maintained by Mark Overmeer <mailtools@overmeer.net>

Original code written by Tim Bunce <Tim.Bunce@ig.co.uk>, with a kick start from Graham Barr <gbarr@pobox.com>. With contributions by Gerard Hickey <hickey@ctron.com>