CVE-2012-2368

Published: Aug 13, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Bytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote attackers to gain access to email accounts via an arbitrary password.

Affected (1)

Products: Bytemark: Symbiosis

Bytemark

1 product

Symbiosis

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bytemark Symbiosis	Up to 1321

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://secunia.com/advisories/48993

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/05/14/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/05/14/3

Source: secalert@redhat.com

https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&rev_to=1322

Source: secalert@redhat.com

ExploitPatch

http://secunia.com/advisories/48993

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/05/14/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/05/14/3

Source: af854a3a-2127-422b-91ae-364da2661108

https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&rev_to=1322

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

Timeline

No history available yet.