CVE-2007-2591

Опубликовано: 11 мая 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.

Ссылки

http://osvdb.org/34513
http://secunia.com/advisories/25212
Patch
Vendor Advisory
http://securityreason.com/securityalert/2689
http://www.sec-consult.com/289.html
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/468048/100/0/threaded
http://www.vupen.com/english/advisories/2007/1727
http://osvdb.org/34513
http://secunia.com/advisories/25212
Patch
Vendor Advisory
http://securityreason.com/securityalert/2689
http://www.sec-consult.com/289.html
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/468048/100/0/threaded
http://www.vupen.com/english/advisories/2007/1727

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nokia:groupwise_mobile_server:*:*:*:*:*:*:*:*

cpe:2.3:a:nokia:intellisync_mobile_suite:6.4.31.2:*:*:*:*:*:*:*

cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.0.107:*:*:*:*:*:*:*

cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.2.2:*:*:*:*:*:*:*

cpe:2.3:a:nokia:intellisync_wireless_email_express:*:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01224

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5r33-5w5f-f47j

github

почти 4 года назад