Vulnerability Details CVE-2001-1211
Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://support.ipswitch.com/kb/IM-20011219-DM01.htm
- http://support.ipswitch.com/kb/IM-20020301-DM02.htm
- http://www.iss.net/security_center/static/7752.php
- http://www.securityfocus.com/archive/1/247786
- http://www.securityfocus.com/bid/3766
- http://support.ipswitch.com/kb/IM-20011219-DM01.htm
- http://support.ipswitch.com/kb/IM-20020301-DM02.htm
- http://www.iss.net/security_center/static/7752.php
- http://www.securityfocus.com/archive/1/247786
- http://www.securityfocus.com/bid/3766
Products affected by CVE-2001-1211
-
cpe:2.3:a:ipswitch:imail:6.1
-
cpe:2.3:a:ipswitch:imail:6.2
-
cpe:2.3:a:ipswitch:imail:6.3
-
cpe:2.3:a:ipswitch:imail:6.4
-
cpe:2.3:a:ipswitch:imail:7.0.1
-
cpe:2.3:a:ipswitch:imail:7.0.2
-
cpe:2.3:a:ipswitch:imail:7.0.3
-
cpe:2.3:a:ipswitch:imail:7.0.4