CVE-2007-2590 - Vulnerability Details - OpenCVE

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Nokia	Groupwise Mobile Server Intellisync Mobile Suite Intellisync Wireless Email Express

Configuration 1 [-]

OR	cpe:2.3:a:nokia:groupwise_mobile_server::::::::
	cpe:2.3:a:nokia:intellisync_mobile_suite:6.4.31.2:::::::*
	cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.0.107:::::::*
	cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.2.2:::::::*
	cpe:2.3:a:nokia:intellisync_wireless_email_express::::::::

No data.

References

Link	Providers
http://osvdb.org/34514
http://secunia.com/advisories/25212
http://securityreason.com/securityalert/2689
http://www.sec-consult.com/289.html
http://www.securityfocus.com/archive/1/468048/100/0/threaded
http://www.vupen.com/english/advisories/2007/1727

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-05-11T03:55:00

Updated: 2024-08-07T13:42:33.555Z

Reserved: 2007-05-10T00:00:00

Link: CVE-2007-2590

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-05-11T04:20:00.000

Modified: 2024-11-21T00:31:10.203

Link: CVE-2007-2590

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-05-09T00:00:00", "descriptions": [{"lang": "en", "value": "Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "34514", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/34514"}, {"tags": ["x_refsource_MISC"], "url": "http://www.sec-consult.com/289.html"}, {"name": "ADV-2007-1727", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1727"}, {"name": "20070509 SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/468048/100/0/threaded"}, {"name": "25212", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25212"}, {"name": "2689", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2689"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2590", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "34514", "refsource": "OSVDB", "url": "http://osvdb.org/34514"}, {"name": "http://www.sec-consult.com/289.html", "refsource": "MISC", "url": "http://www.sec-consult.com/289.html"}, {"name": "ADV-2007-1727", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1727"}, {"name": "20070509 SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/468048/100/0/threaded"}, {"name": "25212", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25212"}, {"name": "2689", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2689"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:42:33.555Z"}, "title": "CVE Program Container", "references": [{"name": "34514", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/34514"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.sec-consult.com/289.html"}, {"name": "ADV-2007-1727", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/1727"}, {"name": "20070509 SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/468048/100/0/threaded"}, {"name": "25212", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25212"}, {"name": "2689", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2689"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2590", "datePublished": "2007-05-11T03:55:00", "dateReserved": "2007-05-10T00:00:00", "dateUpdated": "2024-08-07T13:42:33.555Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nokia:groupwise_mobile_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "49230DA2-0B09-42BF-811B-1CCF56181FBC", "vulnerable": true}, {"criteria": "cpe:2.3:a:nokia:intellisync_mobile_suite:6.4.31.2:*:*:*:*:*:*:*", "matchCriteriaId": "A3E0EF3B-D4F6-4300-949B-F80285C43CAB", "vulnerable": true}, {"criteria": "cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.0.107:*:*:*:*:*:*:*", "matchCriteriaId": "DB300678-04E7-4F6B-AE43-8931C2FF5F40", "vulnerable": true}, {"criteria": "cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "F1795FDF-D272-476F-85FA-D57A474CA3F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:nokia:intellisync_wireless_email_express:*:*:*:*:*:*:*:*", "matchCriteriaId": "75F41ABD-B71D-48B3-B911-8F0ED1BA8A83", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp."}, {"lang": "es", "value": "Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107 y 6.6.2.2, posiblemente involucrando al Novell Groupwise Mobile Server y al Nokia Intellisync Wireless Email Express, permite a atacantes remotos obtener nombres de usuario y otra informaci\u00f3n sensible mediante una petici\u00f3n directa al (1) usrmgr/userList.asp o (2) al usrmgr/userStatusList.asp."}], "id": "CVE-2007-2590", "lastModified": "2024-11-21T00:31:10.203", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-05-11T04:20:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/34514"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/25212"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2689"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://www.sec-consult.com/289.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/468048/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1727"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/34514"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/25212"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2689"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://www.sec-consult.com/289.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/468048/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/1727"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}