Sun JavaMail API MimeMessage Infromation Disclosure Vulnerability
BID:13683
Info
Sun JavaMail API MimeMessage Infromation Disclosure Vulnerability
| Bugtraq ID: | 13683 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 19 2005 12:00AM |
| Updated: | May 19 2005 12:00AM |
| Credit: | Discovery of this issue is credited to Ricky Latt <[email protected]>. |
| Vulnerable: |
Sun Solstice Internet Mail Server POP3 2.0 Sun JavaMail 1.3.2 Sun JavaMail 1.3 |
| Not Vulnerable: | |
Discussion
Sun JavaMail API MimeMessage Infromation Disclosure Vulnerability
The MimeMessage method in the Sun JavaMail API does not perform sufficient validation on message number values that are passed to the method during requests. An attacker that can successfully authenticate to an email server implementation that is written using the Sun JavaMail API, may exploit this issue to make requests for arbitrary email messages that are stored on the server.
The MimeMessage method in the Sun JavaMail API does not perform sufficient validation on message number values that are passed to the method during requests. An attacker that can successfully authenticate to an email server implementation that is written using the Sun JavaMail API, may exploit this issue to make requests for arbitrary email messages that are stored on the server.
Exploit / POC
Sun JavaMail API MimeMessage Infromation Disclosure Vulnerability
The following example is available:
User can do easily change msgno to whatever he wants. If he enters valid message no, then he will be able to view others message.
http://www.example.com/ReadMessage.jsp?msgno=10001
http://www.example.com/ReadMessage.jsp?msgno=10002
The following example is available:
User can do easily change msgno to whatever he wants. If he enters valid message no, then he will be able to view others message.
http://www.example.com/ReadMessage.jsp?msgno=10001
http://www.example.com/ReadMessage.jsp?msgno=10002
Solution / Fix
Sun JavaMail API MimeMessage Infromation Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Sun JavaMail API MimeMessage Infromation Disclosure Vulnerability
References:
References:
- JavaMail 1.3.2 Release (Sun)
- JavaMail Information Disclosure (msgno) (Ricky Latt