CVE-2004-2071 in Mail Solution

Summary

Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 05/19/2005
• Disclosure: 12/31/2004
• Moderation: VulDB entry created
• Entries: 1: VDB-23016
• CPE: ready
• CWE: CWE-287 (Unconfirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.04938
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2071
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2071
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2071/