Описание
Plesk 8.6.0, when short mail login names (SHORTNAMES) are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with (1) a base64-encoded username that begins with a valid shortname, or (2) a username that matches a valid password, as demonstrated using (a) SMTP and qmail, and (b) Courier IMAP and POP3.
Ссылки
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:parallels:plesk:8.6.0:-:linux\/unix:*:*:*:*:*
cpe:2.3:a:parallels:plesk:8.6.0:-:windows:*:*:*:*:*
EPSS
Процентиль: 48%
0.00243
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
около 3 лет назад
Plesk 8.6.0, when short mail login names (SHORTNAMES) are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with (1) a base64-encoded username that begins with a valid shortname, or (2) a username that matches a valid password, as demonstrated using (a) SMTP and qmail, and (b) Courier IMAP and POP3.
EPSS
Процентиль: 48%
0.00243
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-287