PT-2007-3080 · B21Soft · B21Soft Basp21+1

Published 2007-03-27 · Updated 2017-07-29 · CVE-2007-1713

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: B21Soft BASP21 versions 2003.0211 and earlier B21Soft BASP21 Pro versions 1.0.702.27 and earlier

Description: A CRLF injection issue allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.

Recommendations: For B21Soft BASP21 versions 2003.0211 and earlier, update to a version later than 2003.0211 to resolve the issue. For B21Soft BASP21 Pro versions 1.0.702.27 and earlier, update to a version later than 1.0.702.27 to resolve the issue. As a temporary workaround, consider restricting the use of CRLF sequences in Subject lines to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-1713

Affected Products

B21Soft Basp21

B21Soft Basp21 Pro

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-1713 · Security Note
• http://secunia.com/advisories/24652 · Vendor Advisory
• http://osvdb.org/34495 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33211 · Note
• http://vupen.com/english/advisories/2007/1113 · Note
• http://hi-ho.ne.jp/babaq/basp21.html · Note
• http://jvn.jp/jp/JVN%2386092776/index.html · Note
• http://securityfocus.com/bid/23134 · Note