CVE-2001-1211

Description

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.

References

http://www.securityfocus.com/bid/3766

http://www.securityfocus.com/archive/1/247786

http://www.iss.net/security_center/static/7752.php

http://support.ipswitch.com/kb/IM-20020301-DM02.htm

http://support.ipswitch.com/kb/IM-20011219-DM01.htm

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS