UBUNTU-CVE-2017-5614

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2017-5614

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-5614.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-5614

Upstream

CVE-2017-5614

Published

2017-03-03T15:59:00Z

Modified

2025-07-16T08:13:20.578723Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.

References

Affected packages

Ubuntu:14.04:LTS / cgiemail

Package

Name: cgiemail
Purl: pkg:deb/ubuntu/cgiemail@1.6-37+deb7u1build0.14.04.1?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6-37+deb7u1build0.14.04.1

Affected versions

1.*

1.6-37

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "cgiemail",
            "binary_version": "1.6-37+deb7u1build0.14.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-5614.json"

Ubuntu:16.04:LTS / cgiemail