Lucene search

[email protected]NVD:CVE-2007-3275

HistoryJun 19, 2007 - 9:30 p.m.

CVE-2007-3275

2007-06-1921:30:00

CWE-255

[email protected]

web.nvd.nist.gov

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

81.1%

JSON

MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

mailwashermailwasher_serverRange≤2.2.0

VendorProductVersionCPE
mailwashermailwasher_server*cpe:2.3:a:mailwasher:mailwasher_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mailwasher	mailwasher_server	*	cpe:2.3:a:mailwasher:mailwasher_server::::::::

References

osvdb.org/37538

secunia.com/advisories/25695

sourceforge.net/project/shownotes.php?release_id=515127

www.securityfocus.com/bid/24507

www.vupen.com/english/advisories/2007/2239

exchange.xforce.ibmcloud.com/vulnerabilities/34925

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

81.1%

JSON

Related for NVD:CVE-2007-3275

cve1 cvelist1 prion1