PT-2012-3989 · Bytemark · Bytemark Symbiosis

Steve Kemp · Publicado 2012-08-13 · Atualizado 2012-08-14 · CVE-2012-2368

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bytemark Symbiosis versions prior to Revision 1322

Description The issue allows remote attackers to gain access to email accounts using an arbitrary password due to improper password validation.

Recommendations For versions prior to Revision 1322, update to Revision 1322 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-2368

Produtos afetados

Bytemark Symbiosis

Referências · 5

• 🔥 https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&rev_to=1322 · Exploit
• http://openwall.com/lists/oss-security/2012/05/14/3 · Nota
• http://secunia.com/advisories/48993 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/05/14/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2368 · Nota de Segurança