EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.
Affected Platforms
Emumail Emumail UnixEmumail EmumailEmumail Emumail Red Hat Linux