PT-2004-2967 · Macallan · Macallan Mail Solution

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2071

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Macallan Mail Solution versions prior to 2.8.4.6

Description The issue allows remote attackers to bypass authentication in the web interface. This can be achieved via an HTTP GET request with two slashes ("//") after the server name.

Recommendations For versions prior to 2.8.4.6, update to a version that contains a fix for this issue to prevent authentication bypass in the web interface.

Exploit

Correção

Identificadores relacionados

CVE-2004-2071

Produtos afetados

Macallan Mail Solution

Referências · 8

• 🔥 https://exploit-db.com/exploits/23687 · Exploit
• 🔥 http://securityfocus.com/bid/9646 · Exploit
• http://secunia.com/advisories/10861 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2071 · Nota de Segurança
• http://securitytracker.com/id?1009030 · Nota
• https://testzone.secunia.com/advisories/10861 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15194 · Nota
• http://osvdb.org/3926 · Nota