Lucene search
MitreCVE-2002-2165HistoryNov 16, 2005 - 9:17 p.m.
CVE-2002-2165
2005-11-1621:17:00
mitre
web.nvd.nist.gov
24
imho webmail
cve-2002-2165
security vulnerability
referer leak
nvd
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0
Percentile
0.4%
The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser’s previous login session in an error page, which allows local users to read another user’s inbox.
Affected configurations
Node
imhoimho_webmailMatch0.96
ORimhoimho_webmailMatch0.96.1
ORimhoimho_webmailMatch0.96.2
ORimhoimho_webmailMatch0.96.3
ORimhoimho_webmailMatch0.97
ORimhoimho_webmailMatch0.97.1
ORimhoimho_webmailMatch0.98
ORimhoimho_webmailMatch0.98.2
ORimhoimho_webmailMatch0.98.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| imho | imho_webmail | 0.96 | cpe:2.3:a:imho:imho_webmail:0.96:*:*:*:*:*:*:* |
| imho | imho_webmail | 0.96.1 | cpe:2.3:a:imho:imho_webmail:0.96.1:*:*:*:*:*:*:* |
| imho | imho_webmail | 0.96.2 | cpe:2.3:a:imho:imho_webmail:0.96.2:*:*:*:*:*:*:* |
| imho | imho_webmail | 0.96.3 | cpe:2.3:a:imho:imho_webmail:0.96.3:*:*:*:*:*:*:* |
| imho | imho_webmail | 0.97 | cpe:2.3:a:imho:imho_webmail:0.97:*:*:*:*:*:*:* |
| imho | imho_webmail | 0.97.1 | cpe:2.3:a:imho:imho_webmail:0.97.1:*:*:*:*:*:*:* |
| imho | imho_webmail | 0.98 | cpe:2.3:a:imho:imho_webmail:0.98:*:*:*:*:*:*:* |
| imho | imho_webmail | 0.98.2 | cpe:2.3:a:imho:imho_webmail:0.98.2:*:*:*:*:*:*:* |
| imho | imho_webmail | 0.98.3 | cpe:2.3:a:imho:imho_webmail:0.98.3:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2002-2165
2002-12-31 05:00:00
exploitdb
exploitdb
IMHO Webmail 0.9x - Account Hijacking
2002-07-15 00:00:00
cvelist
cvelist
CVE-2002-2165
2005-11-16 21:17:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0
Percentile
0.4%
Related for CVE-2002-2165