CVE-2015-9278 - CVE | ByteOS Network

CVE Vulnerability Details :

CVE-2015-9278

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-16 Jan, 2019 | 16:00

Updated At-06 Aug, 2024 | 08:43

▼CVE Numbering Authority (CNA)

MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-multiple-vulnerabilities-in-mailenable.pdf	x_refsource_MISC
https://www.nccgroup.trust/uk/our-research/multiple-vulnerabilities-in-mailenable/	x_refsource_MISC
https://web.archive.org/web/20150329173628/http://www.mailenable.com/Standard-ReleaseNotes.txt	x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-multiple-vulnerabilities-in-mailenable.pdf	x_refsource_MISC x_transferred
https://www.nccgroup.trust/uk/our-research/multiple-vulnerabilities-in-mailenable/	x_refsource_MISC x_transferred
https://web.archive.org/web/20150329173628/http://www.mailenable.com/Standard-ReleaseNotes.txt	x_refsource_MISC x_transferred