Description
TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to arbitrary users by leveraging shell access, as demonstrated by a TELNET or SSH session to the server.
References
- http://jvn.jp/en/jp/JVN04288738/458182/index.html
- JVNDB-2013-000031 third-party-advisory
- JVN#04288738 third-party-advisory