NuralStorm Webmail Multiple Security Vulnerabilities
BID:41559
Info
NuralStorm Webmail Multiple Security Vulnerabilities
| Bugtraq ID: | 41559 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 09 2010 12:00AM |
| Updated: | Jul 09 2010 12:00AM |
| Credit: | Justin C. Klein Keane |
| Vulnerable: |
NuralStorm Webmail 0.985b |
| Not Vulnerable: | |
Discussion
NuralStorm Webmail Multiple Security Vulnerabilities
NuralStorm Webmail is prone to multiple security vulnerabilities.
An attacker can exploit these vulnerabilities to obtain potentially sensitive information, create or delete arbitrary files, send unsolicited bulk email to users, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, perform unauthorized actions, disclose or modify sensitive information, or upload arbitrary code and run it in the context of the webserver process. Other attacks are also possible.
Webmail 0.985b is vulnerable; other versions may also be affected.
NuralStorm Webmail is prone to multiple security vulnerabilities.
An attacker can exploit these vulnerabilities to obtain potentially sensitive information, create or delete arbitrary files, send unsolicited bulk email to users, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, perform unauthorized actions, disclose or modify sensitive information, or upload arbitrary code and run it in the context of the webserver process. Other attacks are also possible.
Webmail 0.985b is vulnerable; other versions may also be affected.
Exploit / POC
NuralStorm Webmail Multiple Security Vulnerabilities
Attackers can exploit these issues via a browser.
Attackers can exploit these issues via a browser.
Solution / Fix
NuralStorm Webmail Multiple Security Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
NuralStorm Webmail Multiple Security Vulnerabilities
References:
References:
- NuralStorm Homepage (NuralStorm)
- NuralStorm Webmail Multiple Vulnerabilities (Mad Irish)