PT-2003-2086 · Ritlabs · The Bat!

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1133

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Bat! versions 1.0.11 through 2.0

Description The issue allows local users to read other users' email messages due to insecure ACLs used when creating new accounts.

Recommendations For versions 1.0.11 through 2.0, consider modifying the account creation process to use secure ACLs, restricting access to email messages for each user.

Exploit

Correção

Identificadores relacionados

CVE-2003-1133

Produtos afetados

The Bat!

Referências · 5

• 🔥 http://securityfocus.com/archive/1/342485 · Exploit
• 🔥 http://securitytracker.com/id?1008004 · Exploit
• http://securityfocus.com/bid/8891 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1133 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13527 · Nota