Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ipswitch IMail域管理权限提升漏洞
Vulnerability Description
IPSwitch IMail是一个流行的基于Web的邮件收取程序，被很多ISP所使用。 IPSwitch IMail 7.05版存在设计错误，可以使一个域的管理员接管同一主机上其他域的用户别名和邮件列表的管理操作。 问题在于IMail检查对于某些域的别名管理会话的权限时，只是检查用户是不是一个管理员而不检查用户是不是当前域的管理员，攻击者可以任意列出、查看、增加、删除其他域的用户别名和邮件列表。
CVSS Information
N/A
Vulnerability Type
N/A