Lucene search

[email protected]CVE-2007-2591

HistoryMay 11, 2007 - 4:20 a.m.

CVE-2007-2591

2007-05-1104:20:00

[email protected]

web.nvd.nist.gov

nokia

intellisync

mobile suite

vulnerability

remote

user account

modification

denial of service

nvd

cve-2007-2591

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.4%

JSON

usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.

Affected configurations

NVD

Node

nokiagroupwise_mobile_server

nokiaintellisync_mobile_suiteMatch6.4.31.2

nokiaintellisync_mobile_suiteMatch6.6.0.107

nokiaintellisync_mobile_suiteMatch6.6.2.2

nokiaintellisync_wireless_email_express

CPENameOperatorVersion
nokia:groupwise_mobile_servernokia groupwise mobile servereq*
nokia:intellisync_mobile_suitenokia intellisync mobile suiteeq6.4.31.2
nokia:intellisync_mobile_suitenokia intellisync mobile suiteeq6.6.0.107
nokia:intellisync_mobile_suitenokia intellisync mobile suiteeq6.6.2.2
nokia:intellisync_wireless_email_expressnokia intellisync wireless email expresseq*

CPE	Name	Operator	Version
nokia:groupwise_mobile_server	nokia groupwise mobile server	eq	*
nokia:intellisync_mobile_suite	nokia intellisync mobile suite	eq	6.4.31.2
nokia:intellisync_mobile_suite	nokia intellisync mobile suite	eq	6.6.0.107
nokia:intellisync_mobile_suite	nokia intellisync mobile suite	eq	6.6.2.2
nokia:intellisync_wireless_email_express	nokia intellisync wireless email express	eq	*

References

osvdb.org/34513

secunia.com/advisories/25212

securityreason.com/securityalert/2689

www.sec-consult.com/289.html

www.securityfocus.com/archive/1/468048/100/0/threaded

www.vupen.com/english/advisories/2007/1727

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.4%

JSON

Related for CVE-2007-2591

cvelist1 nvd1 prion1