Buffer Overflow Vulnerability in Roundcube Password Plugin by Iusethis
CVE-2015-2181

8.8HIGH

Key Information:

Vendor

Roundcube

Status
Webmail
Vendor
CVE Published:
30 January 2017

What is CVE-2015-2181?

This vulnerability encompasses several buffer overflow issues in the DBMail driver within the Password plugin of Roundcube, specifically versions prior to 1.1.0. Remote attackers could exploit these weaknesses by crafting specific requests that may compromise system integrity through manipulated usernames or passwords, potentially leading to unauthorized access or data leakage.

References

http://www.securityfocus.com/bid/96391
vdb-entryx_refsource_BID
https://github.com/roundcube/roundcubemail/issues/4757
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.