CVE-2013-2302 TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to arbitrary users by leveraging shell access, as demonstrated by a TE...
LowCVSS 1.9
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to arbitrary users by leveraging shell access, as demonstrated by a TELNET or SSH session to the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| transware active mail | = 6.0 | No fix listed |
References
- jvn.jp
- JVN#04288738 third-party-advisory
- JVNDB-2013-000031 third-party-advisory