CVE-2007-2591 usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote at...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nokia groupwise mobile server | All versions | No fix listed |
| nokia intellisync mobile suite | = 6.4.31.2 | No fix listed |
| nokia intellisync mobile suite | = 6.6.0.107 | No fix listed |
| nokia intellisync mobile suite | = 6.6.2.2 | No fix listed |
| nokia intellisync wireless email express | All versions | No fix listed |
References
- 34513 vdb-entry
- 25212 patch third-party-advisory vendor-advisory
- 2689 third-party-advisory
- www.sec-consult.com exploit vendor-advisory
- 20070509 SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express mailing-list
- ADV-2007-1727 vdb-entry