CVE-2008-3728

Published Aug 20, 2008

Last updated 7 years ago

Overview

Description: Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-264

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microworld_technologies:mailscan:5.6.a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A5DB2CB4-026C-4A56-86EB-F3C28F7A6CC8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References