First published: Fri Oct 12 2001(Updated: )
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IPSWITCH IMail | =6.0.6 | |
IPSWITCH IMail | =6.0.2 | |
IPSWITCH IMail | =7.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-1281 is considered a moderate security risk due to its potential for unauthorized access to user information within the Web Messaging Server.
To fix CVE-2001-1281, update to a later version of Ipswitch IMail that is not vulnerable, preferably version 7.0.5 or later.
CVE-2001-1281 affects Ipswitch IMail versions 6.0.2, 6.0.6, and 7.0.4.
Exploiting CVE-2001-1281 allows remote authenticated users to modify information of other users, which can lead to data manipulation and compromise.
CVE-2001-1281 is a known vulnerability in older versions of Ipswitch IMail and while not common today, it is crucial for users of those versions to be aware.