CVE-2007-3796 | BDVDB-2026-25326 Detail

Description#

The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12007-07-17Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.