Dada Mail Dada Bridge Plugin Unspecified Security Bypass Vulnerability

Bugtraq ID:	37661
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 07 2010 12:00AM
Updated:	Jan 07 2010 12:00AM
Credit:	The vendor disclosed this issue.
Vulnerable:	Dada Mail Dada Mail 4.0.1 Dada Mail Dada Mail 4.0 Dada Mail Dada Mail 2.10 Alpha 1 Dada Mail Dada Mail 2.9.2 Dada Mail Dada Mail 2.8.11 Dada Mail Dada Mail 2.8.10 Dada Mail Dada Mail 2.8.9 Dada Mail Dada Mail 2.8.2 Dada Mail Dada Mail 2.8 Dada Mail Dada Mail 2.7.1 Dada Mail Dada Mail 2.7 Dada Mail Dada Mail 2.6.4
Not Vulnerable:	Dada Mail Dada Mail 4.0.2

Dada Mail Dada Bridge Plugin Unspecified Security Bypass Vulnerability

Dada Mail is prone to an unspecified security-bypass vulnerability.

Very little is known about this issue at this time. We will update this BID as more information emerges.

Versions prior to Dada Mail 4.0.2 are vulnerable.

Dada Mail Dada Bridge Plugin Unspecified Security Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Dada Mail Dada Bridge Plugin Unspecified Security Bypass Vulnerability

Solution:
The vendor has released fixes. Please see the references for details.

Dada Mail Dada Bridge Plugin Unspecified Security Bypass Vulnerability

References:

• Dada Mail Homepage (Dada Mail)
  
• Version 4.0.2 of Dada Mail (Dada Mail)