CVE-2007-3275

MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access…

published June 19, 2007

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in mwi/servlet/Login.cpp. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01485 · 73.8th percentile
Published
2007-06-19T21:00Z
EPSS history
Timeline
  • 19 JUN 21:00Z
    MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords, which allows remote attackers to access…
    cvelistv5