NVD

Id
55941  
Name
CVE-2007-3796  
Description
The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-17  
Modified Date
2008-09-05  
Seq
2007-3796  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284580 55941 CVE-2007-3796 20070717 [Sec-1 Ltd] Advisory: MailMarshal Spam Quarantine Password Retrieval Vulnerability  View
284581 55941 CVE-2007-3796 2895  View
284582 55941 CVE-2007-3796 http://www.sec-1labs.co.uk/advisories/BTA_Full.pdf  View
284583 55941 CVE-2007-3796 24936  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55431 JVNDB-2007-004123 MailMarshal SMTP 用の Spam Quarantine HTTP インターフェースにおけるアカウントを変更される脆弱性 MailMarshal SMTP 用の Spam Quarantine HTTP インターフェースのパスワードリセット機能には、任意のアカウント情報を変更される脆弱性が存在します。 CVE-2007-3796 27151 CVE-2007-3796 55941 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004123.html 2007-07-17 2012-09-25 View