CVE-2008-7012 - Vulnerability Details - OpenCVE

courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Complete

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.04585.

Key SSVC decision points have not yet been added.

Vendors	Products
Accellion	Secure File Transfer Appliance

Configuration 1 [-]

OR	cpe:2.3:h:accellion:secure_file_transfer_appliance::::::::
	cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_135:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2008-6971	courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/48242
http://secunia.com/advisories/31848
http://www.securityfocus.com/bid/31178
http://www.securitytracker.com/id?1020870
http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/45159

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-08-19T10:00:00

Updated: 2024-08-07T11:49:02.486Z

Reserved: 2009-08-18T00:00:00

Link: CVE-2008-7012

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-08-19T10:30:00.593

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-7012

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-09-15T00:00:00", "descriptions": [{"lang": "en", "value": "courier/1000@/api_error_email.html (aka \"error reporting page\") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "31178", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/31178"}, {"name": "1020870", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1020870"}, {"name": "48242", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/48242"}, {"tags": ["x_refsource_MISC"], "url": "http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt"}, {"name": "31848", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/31848"}, {"name": "fta-errorreporting-mail-relay(45159)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45159"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-7012", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "courier/1000@/api_error_email.html (aka \"error reporting page\") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "31178", "refsource": "BID", "url": "http://www.securityfocus.com/bid/31178"}, {"name": "1020870", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1020870"}, {"name": "48242", "refsource": "OSVDB", "url": "http://osvdb.org/48242"}, {"name": "http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt", "refsource": "MISC", "url": "http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt"}, {"name": "31848", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/31848"}, {"name": "fta-errorreporting-mail-relay(45159)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45159"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T11:49:02.486Z"}, "title": "CVE Program Container", "references": [{"name": "31178", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/31178"}, {"name": "1020870", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1020870"}, {"name": "48242", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/48242"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt"}, {"name": "31848", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/31848"}, {"name": "fta-errorreporting-mail-relay(45159)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45159"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-7012", "datePublished": "2009-08-19T10:00:00", "dateReserved": "2009-08-18T00:00:00", "dateUpdated": "2024-08-07T11:49:02.486Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:accellion:secure_file_transfer_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "7115262A-B4F1-4271-A2E8-3F6BD8F005EA", "versionEndIncluding": "7_0_178", "vulnerable": true}, {"criteria": "cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_135:*:*:*:*:*:*:*", "matchCriteriaId": "59DB02D8-8C89-48C6-9365-1AA8FEB88C15", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "courier/1000@/api_error_email.html (aka \"error reporting page\") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters."}, {"lang": "es", "value": "courier/1000@/api_error_email.html (tambien conocido como \"error reporting page\") en Accellion File Transfer Appliance FTA_7_0_178, y posiblemente otras versiones anteriores de FTA_7_0_189, permite a atacantes remotos enviar spam a trav\u00e9s de los par\u00e1metros modificados \"description\" y \"client_email parameter\"."}], "id": "CVE-2008-7012", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:C/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-08-19T10:30:00.593", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/48242"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/31848"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/31178"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1020870"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45159"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/48242"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/31848"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/31178"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1020870"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45159"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}