CVE

Id
33845  
CVE No.
CVE-2008-3728  
Status
Candidate  
Description
Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/.  
Phase
Assigned (20080820)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
369191 33845 CVE-2008-3728 BUGTRAQ:20080815 Re: MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface  View
369192 33845 CVE-2008-3728 URL:http://marc.info/?l=bugtraq&m=121881329424635&w=2  View
369193 33845 CVE-2008-3728 MISC:http://www.oliverkarow.de/research/mailscan.txt  View
369194 33845 CVE-2008-3728 BID:30700  View
369195 33845 CVE-2008-3728 URL:http://www.securityfocus.com/bid/30700  View
369196 33845 CVE-2008-3728 SECUNIA:31534  View
369197 33845 CVE-2008-3728 URL:http://secunia.com/advisories/31534  View
369198 33845 CVE-2008-3728 SREASON:4172  View
369199 33845 CVE-2008-3728 URL:http://securityreason.com/securityalert/4172  View
369200 33845 CVE-2008-3728 XF:mailscan-admininterface-security-bypass(44518)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50846 JVNDB-2008-006156 VLC Media Player の modules/demux/tta.c における整数オーバーフローの脆弱性 VLC Media Player の modules/demux/tta.c の Open 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2008-3732 33845 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006156.html  View