CVE-2008-3728 Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determin...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microworld technologies mailscan | = 5.6.a | No fix listed |
References
- 20080815 Re: MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface exploit mailing-list
- 31534 third-party-advisory vendor-advisory
- 4172 third-party-advisory
- www.oliverkarow.de exploit
- 30700 exploit vdb-entry
- mailscan-admininterface-security-bypass(44518) vdb-entry