PT-2003-2297 · Gabber · Gabber

Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1352

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gabber version 0.8.7

Description The issue allows remote attackers to obtain user session activity and the Gabber version number by sniffing, as Gabber sends an email to a specific address during user login and logout.

Recommendations For Gabber version 0.8.7, consider restricting or disabling the email sending feature during user login and logout as a temporary workaround until a patch is available.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2003-1352

Affected Products

Gabber

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-1352 · Security Note
• http://securityfocus.com/bid/6624 · Note
• http://archives.neohapsis.com/archives/bugtraq/2003-01/0179.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11115 · Note