[Japanese]

JVNDB-2006-000695

Kmail CGI authentication bypass vulnerability

Overview

Kmail CGI is a web mail system for cellular phones. Kmail CGI contains a user authentication bypass vulnerability.
CVSS Severity (What is CVSS?)

CVSS V2 Severity:
Base Metrics 2.6 (Low) [IPA Score]
  • Access Vector: Local
  • Access Complexity: High
  • Authentication: None
  • Confidentiality Impact: Partial
  • Integrity Impact: Partial
  • Availability Impact: None
Affected Products


futomi Co.,Ltd.
  • Kmail CGI Version 1.0.3 and earlier

Impact

A remote attacker may bypass Kmail CGI's user authentication, and view or delete the emails of Kmail users.
Solution

Vendor Information

futomi Co.,Ltd.
  • futomi's CGI Cafe : 20061012 (Japanese)
CWE (What is CWE?)

CVE (What is CVE?)

  1. CVE-2006-7111
References

  1. JVN : JVN#41241092
  2. National Vulnerability Database (NVD) : CVE-2006-7111
  3. Secunia Advisory : SA22351
  4. SecurityFocus : 20506
  5. OPEN SOURCE VULNERABILITY DATABASE (OSVDB) : 29788
Revision History

  • [2008/05/21]
      Web page published

Date Public2006/10/12
Date First Published2008/05/21
Date Last Updated2008/05/21