Unscored severity · published Dec 31, 2004
CVE-2004-2071
Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Mail Solution · Macallan
2.8.4.6_build_260 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2071
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2071
secunia.com
http://secunia.com/advisories/10861
securitytracker.com
http://securitytracker.com/id?1009030
www.osvdb.org
http://www.osvdb.org/3926
Exploit
http://www.securityfocus.com/bid/9646
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15194
testzone.secunia.com
https://testzone.secunia.com/advisories/10861
More from Mail Solution
–
CVE-2006-0798
Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated users to read e-mails of other users or…