Lucene search

[email protected]CVE-2007-2590

HistoryMay 11, 2007 - 4:20 a.m.

CVE-2007-2590

2007-05-1104:20:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2007-2590

nokia

intellisync

mobile suite

vulnerability

nvd

novell

groupwise mobile server

wireless email express

user information

remote attack

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.7%

JSON

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.

Affected configurations

NVD

Node

nokiagroupwise_mobile_server

nokiaintellisync_mobile_suiteMatch6.4.31.2

nokiaintellisync_mobile_suiteMatch6.6.0.107

nokiaintellisync_mobile_suiteMatch6.6.2.2

nokiaintellisync_wireless_email_express

CPENameOperatorVersion
nokia:groupwise_mobile_servernokia groupwise mobile servereq*
nokia:intellisync_mobile_suitenokia intellisync mobile suiteeq6.4.31.2
nokia:intellisync_mobile_suitenokia intellisync mobile suiteeq6.6.0.107
nokia:intellisync_mobile_suitenokia intellisync mobile suiteeq6.6.2.2
nokia:intellisync_wireless_email_expressnokia intellisync wireless email expresseq*

CPE	Name	Operator	Version
nokia:groupwise_mobile_server	nokia groupwise mobile server	eq	*
nokia:intellisync_mobile_suite	nokia intellisync mobile suite	eq	6.4.31.2
nokia:intellisync_mobile_suite	nokia intellisync mobile suite	eq	6.6.0.107
nokia:intellisync_mobile_suite	nokia intellisync mobile suite	eq	6.6.2.2
nokia:intellisync_wireless_email_express	nokia intellisync wireless email express	eq	*

References

osvdb.org/34514

secunia.com/advisories/25212

securityreason.com/securityalert/2689

www.sec-consult.com/289.html

www.securityfocus.com/archive/1/468048/100/0/threaded

www.vupen.com/english/advisories/2007/1727

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.7%

JSON

Related for CVE-2007-2590

prion1 cvelist1 nvd1