CVE-2007-2188

Published: Apr 24, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

eXtremail 2.1.1 and earlier does not verify the ID field (aka transaction id) in DNS responses, which makes it easier for remote attackers to conduct DNS spoofing.

Affected (2)

Products: Extremail: Extremail

Extremail

1 product

Extremail

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Extremail Extremail	Version 2.1.1
Extremail Extremail	Version 2.1

References (6)

http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0569.html

Source: cve@mitre.org

Exploit

http://osvdb.org/35584

Source: cve@mitre.org

http://www.securityfocus.com/bid/23577

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0569.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://osvdb.org/35584

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23577

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.