CVE Vulnerability

CVE-2007-2591

usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.sec-consult.com/289.html Exploit Vendor Advisory
http://secunia.com/advisories/25212 Patch Vendor Advisory
http://securityreason.com/securityalert/2689
http://www.vupen.com/english/advisories/2007/1727
http://osvdb.org/34513
http://www.securityfocus.com/archive/1/468048/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:nokia:groupwise_mobile_server:*:*:*:*:*:*:*:*
cpe:2.3:a:nokia:intellisync_mobile_suite:6.4.31.2:*:*:*:*:*:*:*
cpe:2.3:a:nokia:intellisync_wireless_email_express:*:*:*:*:*:*:*:*
cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.0.107:*:*:*:*:*:*:*
cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.2.2:*:*:*:*:*:*:*
Information

Published : 2007-05-11 04:20

Updated : 2018-10-16 04:44

NVD link : CVE-2007-2591

Mitre link : CVE-2007-2591

Products Affected
No products.
CWE
NVD-CWE-Other