CVE-2004-2071

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.

Affected (1)

Products: Macallan: Mail Solution

Macallan

1 product

Mail Solution

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Macallan Mail Solution	Version 2.8.4.6_build_260

References (12)

http://secunia.com/advisories/10861

Source: cve@mitre.org

http://securitytracker.com/id?1009030

Source: cve@mitre.org

http://www.osvdb.org/3926

Source: cve@mitre.org

http://www.securityfocus.com/bid/9646

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/15194

Source: cve@mitre.org

https://testzone.secunia.com/advisories/10861

Source: cve@mitre.org

http://secunia.com/advisories/10861