CVE-2025-43920 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-43920 Interim 1 4 2025-07-12T06:36:08Z current 2025-04-22T23:11:52Z 2025-07-12T06:36:08Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-43920 GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server Teradata 12 SP3 mailman mailman as a component of SUSE Linux Enterprise Server 11 SP4 LTSS mailman as a component of SUSE Linux Enterprise Server 12 SP2-LTSS mailman as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mailman as a component of SUSE Linux Enterprise Server 12 SP5-LTSS mailman as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security mailman as a component of SUSE Linux Enterprise Server Teradata 12 SP3 GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used. CVE-2025-43920 SUSE Linux Enterprise Server 11 SP4 LTSS:mailman SUSE Linux Enterprise Server 12 SP2-LTSS:mailman SUSE Linux Enterprise Server 12 SP4-LTSS:mailman SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:mailman SUSE Linux Enterprise Server 12 SP5-LTSS:mailman SUSE Linux Enterprise Server Teradata 12 SP3:mailman moderate 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N