PT-2009-2453 · Pop3+3 · Pop3+3

Published 2009-08-18 · Updated 2017-08-17 · CVE-2008-6984

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Plesk version 8.6.0

Description The issue allows remote attackers to bypass authentication and send spam e-mail when short mail login names are enabled. This can be achieved by sending a message with a base64-encoded username that begins with a valid shortname, or a username that matches a valid password. The exploitation can occur through various protocols, including SMTP with qmail, and Courier IMAP and POP3.

Recommendations For Plesk version 8.6.0, consider disabling the use of short mail login names (SHORTNAMES) to prevent authentication bypass and spam e-mail sending until a patch is available. Additionally, restrict access to SMTP, qmail, Courier IMAP, and POP3 services to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-6984

Affected Products

Courier-Imap

Pop3

Plesk

Qmail

References · 6

• 🔥 http://securityfocus.com/archive/1/495881 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6984 · Security Note
• http://securitytracker.com/id?1020801 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44856 · Note
• http://securityfocus.com/bid/30956 · Note
• http://osvdb.org/51652 · Note