Evilsentinel 1.0.9 Multiple Remote Vulnerabilities

Bugtraq ID:	27227
Class:	Input Validation Error
CVE:	CVE-2008-0351 CVE-2008-0350
Remote:	Yes
Local:	No
Published:	Jan 10 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	The vendor reported this issue.
Vulnerable:	Evilsentinel Evilsentinel 1.0.9
Not Vulnerable:	Evilsentinel Evilsentinel 1.1

Evilsentinel 1.0.9 Multiple Remote Vulnerabilities

Evilsentinel is prone to multiple remote vulnerabilities including:

- An open-email-relay vulnerability
- Two authentication bypass vulnerabilities.

An attacker can exploit these issues to compromise the affected application, gain unauthorized access to the application, and send unsolicited spam to an unrestricted amount of email addresses from a forged email address. Other attacks are also possible.

These issues affect Evilsentinel 1.0.9; prior versions may also be affected.

Evilsentinel 1.0.9 Multiple Remote Vulnerabilities

Attackers can exploit these issues through a browser.

The following exploit code is available:

• /data/vulnerabilities/exploits/27227.pl

Evilsentinel 1.0.9 Multiple Remote Vulnerabilities

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Evilsentinel Evilsentinel 1.0.9

• Evilsentinel evilsentinel_1.1.0.tar.gz
  http://downloads.sourceforge.net/evilsentinel/evilsentinel_1.1.0.tar.g z?modtime=1199895570&big_mirror=0

Evilsentinel 1.0.9 Multiple Remote Vulnerabilities

References:

• EvilSentinel Homepage (EvilSentine)