JVNDB-2006-000695

Kmail CGI authentication bypass vulnerability

Kmail CGI is a web mail system for cellular phones. Kmail CGI contains a user authentication bypass vulnerability.

Base Metrics: 2.6 (Low) [IPA Score]

• Access Vector: Local
• Access Complexity: High
• Authentication: None
• Confidentiality Impact: Partial
• Integrity Impact: Partial
• Availability Impact: None

futomi Co.,Ltd.

• Kmail CGI Version 1.0.3 and earlier

A remote attacker may bypass Kmail CGI's user authentication, and view or delete the emails of Kmail users.

futomi Co.,Ltd.

• futomi's CGI Cafe : 20061012 (Japanese)

1. CVE-2006-7111

1. JVN : JVN#41241092
2. National Vulnerability Database (NVD) : CVE-2006-7111
3. Secunia Advisory : SA22351
4. SecurityFocus : 20506
5. OPEN SOURCE VULNERABILITY DATABASE (OSVDB) : 29788

[2008/05/21]
  Web page published