high7.5Public exploit code
CVE-2006-4954
The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify information of arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NeoSys Neon Webmail for Java 5.06/5.07 - 'updateuser?in_id' Servlet Arbitrary User Information Modification2006-09-20 · webapps · jsp · Verified
Impact
The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying (1) passwords and (2) permissions, (3) viewing profile settings, and (4) creating and (5) deleting users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Neosys | Neon Webmail | Versions 5.06, 5.07 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22029
- http://vuln.sg/neonmail506-en.html
- http://www.securityfocus.com/bid/20109
- http://www.securityfocus.com/bid/84203
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29089
- http://secunia.com/advisories/22029
- http://vuln.sg/neonmail506-en.html
- http://www.securityfocus.com/bid/20109
- http://www.securityfocus.com/bid/84203
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29089