CVE-2007-3275 | BDVDB-2026-24769 Detail

Description#

MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/25695
http://osvdb.org/37538
http://www.vupen.com/english/advisories/2007/2239
https://exchange.xforce.ibmcloud.com/vulnerabilities/34925
http://www.securityfocus.com/bid/24507
http://sourceforge.net/project/shownotes.php?release_id=515127

Exploit#

No public exploit known

History#

Version 12007-06-19Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.