CVE-2007-3796 The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a....
HighCVSS 7.6
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailmarshal smtp | <= 6.2.0 | No fix listed |
References
- 20070717 [Sec-1 Ltd] Advisory: MailMarshal Spam Quarantine Password Retrieval Vulnerability mailing-list patch
- 26018 third-party-advisory vendor-advisory
- 2895 third-party-advisory
- www.sec-1labs.co.uk url-repurposed
- 24936 vdb-entry