VULNERABILITY INTELLIGENCE

CVE-2007-3796

CVSS score7.6 HIGH
EPSS probability1.89%
CISA KEVNot currently listed
Published2007-07-17
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.

Primary references