NeoMail neomail-prefs.pl security bypass
| neomail-neomailprefs-bypass-security (24737) |  Medium Risk |
Description:
NeoMail is a free Web-based email client. NeoMail version 1.28 and possibly earlier versions could allow a remote attacker to bypass security restrictions. The Session ID in the addfolder() and deletefolder() functions in neomail-prefs.pl is not properly validated. If homedirfolders and homedirspools are disabled, a remote attacker could add and delete arbitrary files in arbitrary directories writable by the mail group.
Platforms Affected:
- NeoCode Solutions, NeoMail 1.28
Remedy:
Upgrade to the latest version of NeoMail (1.29 or later), available from the NeoMail Web site. See References.
Consequences:
Bypass Security
References:
- Neocode Solutions Web site, NeoMail Features at http://neocodesolutions.com/software/neomail/.
- BID-16651: NeoMail Neomail-prefs.PL Security Bypass Vulnerability
- CVE-2006-0711: The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled.
- SA18785: NeoMail neomail-prefs.pl Missing Session ID Validation
- VUPEN/ADV-2006-0564: NeoMail neomail-prefs.pl Missing Session ID Validation Vulnerability
Reported:
Feb 14, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net