CVE

Id
26632  
CVE No.
CVE-2007-3275  
Status
Candidate  
Description
MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20070619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270481 26632 CVE-2007-3275 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=515127  View
270482 26632 CVE-2007-3275 BID:24507  View
270483 26632 CVE-2007-3275 URL:http://www.securityfocus.com/bid/24507  View
270484 26632 CVE-2007-3275 VUPEN:ADV-2007-2239  View
270485 26632 CVE-2007-3275 URL:http://www.vupen.com/english/advisories/2007/2239  View
270486 26632 CVE-2007-3275 OSVDB:37538  View
270487 26632 CVE-2007-3275 URL:http://osvdb.org/37538  View
270488 26632 CVE-2007-3275 SECUNIA:25695  View
270489 26632 CVE-2007-3275 URL:http://secunia.com/advisories/25695  View
270490 26632 CVE-2007-3275 XF:mailwasher-logincheck-unauthorized-access(34925)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57018 JVNDB-2007-005710 WIKINDX 用の localization モジュールにおける特定の管理者機能にアクセスされる脆弱性 WIKINDX 用の localization モジュールには、特定の管理者機能にアクセスされる脆弱性が存在します。 CVE-2007-3277 26632 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005710.html  View