Security Advisory
CVE-2009-4417
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."