CVE-2007-3796

2007-07-17T19:30:00
ID CVE-2007-3796
Type cve
Reporter NVD
Modified 2008-09-05T17:26:39

Description

The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.