PT-2003-1181 · Kerio · Kerio Mailserver

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1434

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kerio MailServer version 5.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the Web mail module. These vulnerabilities allow remote attackers to execute HTML script as other users via certain URLs.

Recommendations For Kerio MailServer version 5.0, update to a version that includes a fix for this issue to prevent remote attackers from executing HTML script as other users.

Exploit

Correção

Identificadores relacionados

CVE-2002-1434

Produtos afetados

Kerio Mailserver

Referências · 5

• 🔥 http://securityfocus.com/bid/5507 · Exploit
• 🔥 https://exploit-db.com/exploits/21728 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1434 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html · Aviso do Fabricante
• http://iss.net/security_center/static/9905.php · Aviso do Fabricante