PT-2008-2256 · Afterlogic · Mailbee Objects

Darkl0Rd · Published 2008-02-06 · Updated 2017-09-29 · CVE-2008-0631

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MailBee Objects version 5.5

Description The issue concerns Multiple ActiveX controls in MailBee.dll, which allow remote attackers to overwrite arbitrary files via the SaveToDisk method or modify files via the AddStringToFile method.

Recommendations For MailBee Objects version 5.5, consider disabling the SaveToDisk and AddStringToFile methods until a patch is available to prevent remote attackers from overwriting or modifying files.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-0631

Affected Products

Mailbee Objects

References · 4

• 🔥 http://securityfocus.com/bid/27481 · Exploit
• 🔥 https://exploit-db.com/exploits/4999 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0631 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40011 · Note