CVE-2008-6984

MEDIUM 5.8CVE-2008-6984 · Published 19/08/2009 · updated 16/06/2026

In short

CVE-2008-6984 is a MEDIUM (CVSS 5.8) vulnerability affecting plesk (parallels).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
plesk parallels	`= 8.6.0`	No fix yet

Description

Plesk 8.6.0, when short mail login names (SHORTNAMES) are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with (1) a base64-encoded username that begins with a valid shortname, or (2) a username that matches a valid password, as demonstrated using (a) SMTP and qmail, and (b) Courier IMAP and POP3.

References

osvdb.org/51652
securityfocus.com/archive/1/495881 · Exploit
securityfocus.com/bid/30956
securitytracker.com/id
exchange.xforce.ibmcloud.com/vulnerabilities/44856

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free