OSVDB ID: 48242

Title: Accellion File Transfer Appliance courier/1000@/api_error_email.html Arbitrary Mail Send

Info

Disclosure

Sep 18, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Solution: Upgrade
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Upgrade to version FTA_7_0_189 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1020870
CVE ID: 2008-7012 (see also: NVD)
Bugtraq ID: 31178
Secunia Advisory ID: 31848
ISS X-Force ID: 45159
Other Advisory URL: http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/48242