CVE-2007-2591 | BDVDB-2026-24080 Detail

Description#

usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.sec-consult.com/289.html
http://www.vupen.com/english/advisories/2007/1727
http://www.securityfocus.com/archive/1/468048/100/0/threaded
http://secunia.com/advisories/25212
http://securityreason.com/securityalert/2689
http://osvdb.org/34513

Exploit#

No public exploit known

History#

Version 12007-05-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.