 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.14370 |
| Category: | CGI abuses |
| Title: | HastyMail HTML Attachement Script Execution |
| Summary: | NOSUMMARY |
| Description: | Description: The remote host is running HastyMail, a PHP-based mail client application. There is a flaw in the remote version of this software which may allow an attacker to execute arbitrary javascript code on the hosts of users of this software. To exploit this flaw, an attacker would need to send an email to a victim using HastyMail containing a malicious HTML attachment. When the victim attempts to read the attachment, his browser may attempt to render the HTML file. An attacker may use this flaw to steal the cookies of the victim and therefore get access to his mailbox, or may perform other attacks. Solution : Upgrade to HastyMail 1.0.2 or 1.2.0 Risk factor: Medium |
| Cross-Ref: |
BugTraq ID: 11022 |
| Copyright | This script is Copyright (C) 2004 Tenable Network Security |
| This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |