CVE-2005-1284 The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP P...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| argosoft mail server | = 1.8.7.6 | No fix listed |
References
- 20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6 mailing-list
- 15822 vdb-entry
- 13323 vdb-entry
- argosoft-mail-server-add-new-mail-account(20228) vdb-entry