CVE-2001-1211 | BDVDB-2026-3776 Detail

Description#

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://support.ipswitch.com/kb/IM-20011219-DM01.htm
http://www.securityfocus.com/bid/3766
http://support.ipswitch.com/kb/IM-20020301-DM02.htm
http://www.iss.net/security_center/static/7752.php
http://www.securityfocus.com/archive/1/247786

Exploit#

No public exploit known

History#

Version 12002-03-15Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.