PT-2000-1389 · Webshield · Webshield Smtp Management Tool

Publicado 2000-05-01 · Atualizado 2008-09-10 · CVE-2000-0448

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebShield SMTP Management Tool version 4.5.44

Description The issue allows remote attackers to access the configuration via the GET CONFIG command due to improper access restriction to the management port when an IP address does not resolve to a hostname.

Recommendations For WebShield SMTP Management Tool version 4.5.44, consider restricting access to the management port to prevent unauthorized configuration access until a patch is available.

Correção

Identificadores relacionados

CVE-2000-0448

Produtos afetados

Webshield Smtp Management Tool

Referências · 4

• http://securityfocus.com/bid/1253 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0448 · Nota de Segurança
• http://securityfocus.com/templates/archive.pike?list=1&msg=6C740781F92BD411831F0090273A8AB806FD4A%40exchange.servers.delphis.net · Nota
• http://osvdb.org/326 · Nota