MailWasher MailWasher Server prior 2.2.0 Active Directory logincheck::dopost Stored credentials management
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
6.5 | $0-$5k | 0.00 |
A vulnerability has been found in MailWasher MailWasher Server and classified as critical. Affected by this vulnerability is the function logincheck::dopost
of the component Active Directory. The manipulation with an unknown input leads to a credentials management vulnerability (Stored). The CWE definition for the vulnerability is CWE-255. As an impact it is known to affect confidentiality. The summary by CVE is:
MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information.
The weakness was published 06/18/2007 (Website). The advisory is shared at secunia.com. This vulnerability is known as CVE-2007-3275 since 06/19/2007. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1552 for this issue.
It is declared as proof-of-concept.
Upgrading to version 2.2.0 eliminates this vulnerability.
The vulnerability is also documented in the vulnerability database at X-Force (34925).
Product
Vendor
Name
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.5VulDB Meta Temp Score: 6.5
VulDB Base Score: 7.5
VulDB Temp Score: 6.5
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Name: StoredClass: Credentials management / Stored
CWE: CWE-255
ATT&CK: T1552
Local: No
Remote: Yes
Availability: 🔍
Status: Proof-of-Concept
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Upgrade: MailWasher Server 2.2.0
Timeline
06/18/2007 🔍06/18/2007 🔍
06/18/2007 🔍
06/18/2007 🔍
06/19/2007 🔍
06/19/2007 🔍
03/15/2015 🔍
10/24/2017 🔍
Sources
Advisory: secunia.com⛔Status: Confirmed
Confirmation: 🔍
CVE: CVE-2007-3275 (🔍)
X-Force: 34925 - Firetrust MailWasher LoginCheck::doPost unauthorized access
SecurityFocus: 24507 - MailWasher Server LDAP Unauthorized Folder Access Vulnerability
Secunia: 25695 - MailWasher Server LDAP Blank Password Security Issue, Not Critical
OSVDB: 37538 - MailWasher w/ LDAP / AD Blank Password Authentication Bypass
Vupen: ADV-2007-2239
Entry
Created: 03/15/2015 15:58Updated: 10/24/2017 09:47
Changes: 03/15/2015 15:58 (58), 10/24/2017 09:47 (7)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.