CVE

Id
25948  
CVE No.
CVE-2007-2591  
Status
Candidate  
Description
usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.  
Phase
Assigned (20070510)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
260769 25948 CVE-2007-2591 BUGTRAQ:20070509 SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express  View
260770 25948 CVE-2007-2591 URL:http://www.securityfocus.com/archive/1/archive/1/468048/100/0/threaded  View
260771 25948 CVE-2007-2591 MISC:http://www.sec-consult.com/289.html  View
260772 25948 CVE-2007-2591 OSVDB:34513  View
260773 25948 CVE-2007-2591 URL:http://osvdb.org/34513  View
260774 25948 CVE-2007-2591 VUPEN:ADV-2007-1727  View
260775 25948 CVE-2007-2591 URL:http://www.vupen.com/english/advisories/2007/1727  View
260776 25948 CVE-2007-2591 SECUNIA:25212  View
260777 25948 CVE-2007-2591 URL:http://secunia.com/advisories/25212  View
260778 25948 CVE-2007-2591 SREASON:2689  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55135 JVNDB-2007-003827 Microsoft Windows 2003 Server の Terminal Server における中間者攻撃を実行される脆弱性 Microsoft Windows 2003 Server の Terminal Server には、TLS が使用されている際、SSL および自己署名された証明書の要件を回避される、サーバセキュリティレベルを下げる、および中間者攻撃を実行される脆弱性が存在します。 CVE-2007-2593 25948 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003827.html  View