Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2004-0671

5 documents4 sources
Severity
5.0MEDIUM
EPSS
10.8%
top 6.66%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Symantec Brightmail Antispam
Timeline
PublishedAug 6
Latest updateApr 29

Description

Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgDetails.do request.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-9rqc-h87g-58h5: Brightmail Spamfilter 6↗2022-04-29
▶
CVEList
CVE-2004-0671: Brightmail Spamfilter 6↗2004-07-13
▶

💥Exploits & PoCs

2
Exploit-DB
ca3de - Multiple Vulnerabilities↗2005-03-03
▶
Exploit-DB
Symantec Brightmail Anti-Spam 6.0 - Unauthorized Message Disclosure↗2004-07-05
▶