NVD

Id
65507  
Name
CVE-2006-6964  
Description
MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user"s settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2007-01-29  
Modified Date
2008-09-05  
Seq
2006-6964  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
341539 65507 CVE-2006-6964 1016337  View
341540 65507 CVE-2006-6964 http://www.mailenable.com/Professional1-ReleaseNotes.txt  View
341541 65507 CVE-2006-6964 mailenable-listattachments-pass-disclosure(27185)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54382 JVNDB-2007-003074 MailEnable Professional における重要な情報を取得される脆弱性 MailEnable Professional は、管理者がユーザ設定を変更する際、ユーザパスワードを平文で提供するため、重要な情報を取得される脆弱性が存在します。 CVE-2006-6964 23066 CVE-2006-6964 65507 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003074.html 2007-01-29 2012-09-25 View