PT-2001-1339 · Alt N Technologies · Mdaemon Pro

Publicado 2001-02-02 · Atualizado 2017-12-19 · CVE-2001-0104

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MDaemon Pro versions 3.5.1 and earlier

Description: The issue allows local users to bypass the lock server security setting. This can be achieved by pressing the Cancel button at the password prompt and then pressing the enter key.

Recommendations: For MDaemon Pro versions 3.5.1 and earlier, consider disabling the lock server security setting temporarily until a fix is available, or apply specific configuration changes as recommended by the software vendor to mitigate this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-0104

Produtos afetados

Mdaemon Pro

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0104 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5763 · Nota
• http://securityfocus.com/archive/1/151156 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0104 · Nota
• http://securityfocus.com/bid/2115 · Aviso do Fabricante