CVE-2005-0157

2005-05-0300:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

56.8%

JSON

The confirm add-on in SmartList 3.15 and earlier allows attackers to
subscribe arbitrary e-mail addresses by using a valid cookie that specifies
an address other than the address for which the cookie was assigned.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsmartlist< 3.15-18UNKNOWN
ubuntu6.10noarchsmartlist< 3.15-18UNKNOWN
ubuntu7.04noarchsmartlist< 3.15-18UNKNOWN