PT-2003-1476 · Sl · Slwebmail+1

David Litchfield + 1 · Publicado 2003-05-08 · Atualizado 2016-10-18 · CVE-2003-0268

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SLWebMail version 3

Description: The issue allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll. This is possible because the error message reveals the path when an invalid request is made.

Recommendations: For SLWebMail version 3, consider restricting access to the WebMailReq.dll until a patch is available to prevent the disclosure of the server's path.

Correção

Identificadores relacionados

CVE-2003-0268

Produtos afetados

Slwebmail

Webmailreq.Dll

Referências · 4

• http://marc.info/?l=ntbugtraq&m=105233363721919&w=2 · Nota
• http://marc.info/?l=bugtraq&m=105232436210273&w=2 · Nota
• http://nextgenss.com/advisories/slwebmail-vulns.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0268 · Nota de Segurança