« Volver al listado

CVE-2001-1211

Estado: ModificadaAlta (7.5)—

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Ipswitch — Imail

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2001-1211",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2001-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://support.ipswitch.com/kb/IM-20011219-DM01.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.ipswitch.com/kb/IM-20020301-DM02.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/7752.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/247786",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/3766",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.ipswitch.com/kb/IM-20011219-DM01.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.ipswitch.com/kb/IM-20020301-DM02.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/7752.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/247786",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/3766",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain."
    },
    {
      "lang": "es",
      "value": "Ipswitch IMail 7.0.4 y versiones anteriores permiten a atacantes con privilegios de administrador, leer y modificar los alias de los usuarios y la información de las listas de correo de otros dominios albergados en el mismo servidor mediante:(1) aliasadmin o(2) programas CGI listadm1, los cuales no verifica adecuadamente que un administrador realmente lo es en ese dominio."
    }
  ],
  "lastModified": "2026-06-16T21:55:49.170",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"
            },
            {
              "criteria": "cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12658962-53E6-49EB-83EF-04A1B5D693B3"
            },
            {
              "criteria": "cpe:2.3:a:ipswitch:imail:6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DA61FCA-BA3C-4014-9C4B-4D4ED65AB07A"
            },
            {
              "criteria": "cpe:2.3:a:ipswitch:imail:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0BC7230-2A64-43CE-B041-22F2E4A559A9"
            },
            {
              "criteria": "cpe:2.3:a:ipswitch:imail:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5700938-EE34-4A16-BE98-74EAA4A48249"
            },
            {
              "criteria": "cpe:2.3:a:ipswitch:imail:7.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCF543E9-F893-4086-BD97-ECB43EEF26BC"
            },
            {
              "criteria": "cpe:2.3:a:ipswitch:imail:7.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3818F47-0A00-4984-857D-DBF87DDB71B4"
            },
            {
              "criteria": "cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84CE3C80-C0D3-4F7C-BF12-10111281DC3D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}