PT-2002-2432 · Basilix · Basilix Webmail

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1710

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions BasiliX Webmail version 1.1.0

Description The issue concerns the attachment capability in Compose Mail, which fails to verify the origin of attachments. This could potentially allow local users to access sensitive information, such as password files, that they should not have access to.

Recommendations For BasiliX Webmail version 1.1.0, consider restricting access to the attachment feature in Compose Mail until a proper fix is implemented to verify the origin of attachments. As a temporary workaround, users should be cautious when using the attachment feature to prevent potential information theft. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1710

Produtos afetados

Basilix Webmail

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/9386 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html · Nota
• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00247.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1710 · Nota de Segurança
• http://securityfocus.com/bid/5062 · Nota