CVE-2004-2071 Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after t...
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macallan mail solution | = 2.8.4.6_build_260 | No fix listed |
References
- 10861 third-party-advisory
- 1009030 vdb-entry
- 3926 vdb-entry
- 9646 exploit vdb-entry
- macallan-gain-unauthorized-access(15194) vdb-entry
- testzone.secunia.com