Vulnerability in Nokia Groupwise Mobile Server
CVE-2007-2591
usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.018 (77.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 77.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: 0.000
Affected products
- Nokia Groupwise Mobile Server
- Nokia Intellisync Mobile Suite — versions 6.4.31.2, 6.6.0.107, 6.6.2.2
- Nokia Intellisync Wireless Email Express
References
- www.sec-consult.com/289.html (Exploit, Vendor Advisory)
- www.vupen.com/english/advisories/2007/1727 (vdb-entry)
- www.securityfocus.com/archive/1/468048/100/0/threaded (mailing-list)
- secunia.com/advisories/25212 (Patch, Vendor Advisory, third-party-advisory)
- securityreason.com/securityalert/2689 (third-party-advisory)
- osvdb.org/34513 (vdb-entry)