PT-2004-2967 · Macallan · Macallan Mail Solution

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2071

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Macallan Mail Solution versions prior to 2.8.4.6

Description The issue allows remote attackers to bypass authentication in the web interface. This can be achieved via an HTTP GET request with two slashes ("//") after the server name.

Recommendations For versions prior to 2.8.4.6, update to a version that contains a fix for this issue to prevent authentication bypass in the web interface.

Exploit

Fix

Related Identifiers

CVE-2004-2071

Affected Products

Macallan Mail Solution

References · 8

• 🔥 https://exploit-db.com/exploits/23687 · Exploit
• 🔥 http://securityfocus.com/bid/9646 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2071 · Security Note
• http://secunia.com/advisories/10861 · Note
• http://securitytracker.com/id?1009030 · Note
• https://testzone.secunia.com/advisories/10861 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15194 · Note
• http://osvdb.org/3926 · Note