CVEvulnerability

CVE-2001-1211

7.5 HIGH Published 2001-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2001-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.

Affected configurations

• ipswitch imail 6.1 • ipswitch imail 6.2 • ipswitch imail 6.3 • ipswitch imail 6.4 • ipswitch imail 7.0.1 • ipswitch imail 7.0.2 • ipswitch imail 7.0.3 • ipswitch imail 7.0.4

References

http://support.ipswitch.com/kb/IM-20011219-DM01.htm support.ipswitch.com
http://support.ipswitch.com/kb/IM-20020301-DM02.htm support.ipswitch.com
http://www.iss.net/security_center/static/7752.php Vendor Advisory
http://www.securityfocus.com/archive/1/247786 Vendor Advisory
http://www.securityfocus.com/bid/3766 Vendor Advisory
http://support.ipswitch.com/kb/IM-20011219-DM01.htm support.ipswitch.com
http://support.ipswitch.com/kb/IM-20020301-DM02.htm support.ipswitch.com
http://www.iss.net/security_center/static/7752.php Vendor Advisory
http://www.securityfocus.com/archive/1/247786 Vendor Advisory
http://www.securityfocus.com/bid/3766 Vendor Advisory