CVE-2007-2590 Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user....
MediumCVSS 6.4
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nokia groupwise mobile server | All versions | No fix listed |
| nokia intellisync mobile suite | = 6.4.31.2 | No fix listed |
| nokia intellisync mobile suite | = 6.6.0.107 | No fix listed |
| nokia intellisync mobile suite | = 6.6.2.2 | No fix listed |
| nokia intellisync wireless email express | All versions | No fix listed |
References
- 34514 vdb-entry
- 25212 patch third-party-advisory vendor-advisory
- 2689 third-party-advisory
- www.sec-consult.com exploit vendor-advisory
- 20070509 SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express mailing-list
- ADV-2007-1727 vdb-entry