CVEvulnerability

CVE-2007-3796

7.6 HIGH Published 2007-07-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-07-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C

Description

The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.

Affected configurations

• mailmarshal mailmarshal smtp (<= 6.2.0)

References