PT-2002-2432 · Basilix · Basilix Webmail

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1710

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions BasiliX Webmail version 1.1.0

Description The issue concerns the attachment capability in Compose Mail, which fails to verify the origin of attachments. This could potentially allow local users to access sensitive information, such as password files, that they should not have access to.

Recommendations For BasiliX Webmail version 1.1.0, consider restricting access to the attachment feature in Compose Mail until a proper fix is implemented to verify the origin of attachments. As a temporary workaround, users should be cautious when using the attachment feature to prevent potential information theft. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1710

Affected Products

Basilix Webmail

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1710 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9386 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html · Note
• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00247.html · Note
• http://securityfocus.com/bid/5062 · Note