PT-2007-3080 · B21Soft · B21Soft Basp21+1

Publicado

2007-03-27

·

Atualizado

2017-07-29

·

CVE-2007-1713

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions: B21Soft BASP21 versions 2003.0211 and earlier B21Soft BASP21 Pro versions 1.0.702.27 and earlier
Description: A CRLF injection issue allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.
Recommendations: For B21Soft BASP21 versions 2003.0211 and earlier, update to a version later than 2003.0211 to resolve the issue. For B21Soft BASP21 Pro versions 1.0.702.27 and earlier, update to a version later than 1.0.702.27 to resolve the issue. As a temporary workaround, consider restricting the use of CRLF sequences in Subject lines to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2007-1713

Produtos afetados

B21Soft Basp21
B21Soft Basp21 Pro