Gentoo Linux Security Advisory GLSA 200611-15 – qmailAdmin fails to properly handle the PATH_INFO variable in qmailadmin.c. The PATH_INFO is a standard CGI environment variable filled with user supplied data. Versions less than 1.2.10 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/52422/glsa-200611-15.txt
Source: https://packetstormsecurity.com/files/52422/Gentoo-Linux-Security-Advisory-200611-15.html