PT-2000-1389 · Webshield · Webshield Smtp Management Tool

Published 2000-05-01 · Updated 2008-09-10 · CVE-2000-0448

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebShield SMTP Management Tool version 4.5.44

Description The issue allows remote attackers to access the configuration via the GET CONFIG command due to improper access restriction to the management port when an IP address does not resolve to a hostname.

Recommendations For WebShield SMTP Management Tool version 4.5.44, consider restricting access to the management port to prevent unauthorized configuration access until a patch is available.

Fix

Related Identifiers

CVE-2000-0448

Affected Products

Webshield Smtp Management Tool

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0448 · Security Note
• http://securityfocus.com/bid/1253 · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=6C740781F92BD411831F0090273A8AB806FD4A%40exchange.servers.delphis.net · Note
• http://osvdb.org/326 · Note