CVE-2005-1284

The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
Configurations

Configuration 1 (hide)

cpe:2.3:a:argosoft:argosoft_mail_server:1.8.7.6:*:pro:*:*:*:*:*

History

20 Nov 2024, 23:56

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=111419001527077&w=2 - () http://marc.info/?l=bugtraq&m=111419001527077&w=2 -
References () http://www.osvdb.org/15822 - () http://www.osvdb.org/15822 -
References () http://www.securityfocus.com/bid/13323 - () http://www.securityfocus.com/bid/13323 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/20228 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/20228 -

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:56


NVD link : CVE-2005-1284

Mitre link : CVE-2005-1284

CVE.ORG link : CVE-2005-1284


JSON object : View

Products Affected

argosoft

  • argosoft_mail_server