NVD

Id
55428  
Name
CVE-2007-3275  
Description
MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-06-19  
Modified Date
2011-10-06  
Seq
2007-3275  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
281665 55428 CVE-2007-3275 http://sourceforge.net/project/shownotes.php?release_id=515127  View
281666 55428 CVE-2007-3275 24507  View
281667 55428 CVE-2007-3275 ADV-2007-2239  View
281668 55428 CVE-2007-3275 mailwasher-logincheck-unauthorized-access(34925)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55324 JVNDB-2007-004016 MailWasher Server における任意のユーザアカウントへアクセスされる脆弱性 MailWasher Server は、LDAP または Active Directory (AD) で使用される際、空のパスワードを適切に処理しない、および mwi/servlet/Login.cpp の LoginCheck::doPost 関数に関連する処理に不備があるため、任意のユーザアカウントへアクセスされる、およびそのアカウント用に格納された迷惑メールを読まれる脆弱性が存在します。 CVE-2007-3275 26630 CVE-2007-3275 55428 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004016.html 2007-06-19 2012-09-25 View