CVE-2012-2368

Impact

Bytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote attackers to gain access to email accounts via an arbitrary password.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/48993
• http://www.openwall.com/lists/oss-security/2012/05/14/1
• http://www.openwall.com/lists/oss-security/2012/05/14/3
• https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&rev_to=1322
• http://secunia.com/advisories/48993
• http://www.openwall.com/lists/oss-security/2012/05/14/1
• http://www.openwall.com/lists/oss-security/2012/05/14/3
• https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&rev_to=1322