A security issue has been reported in MailWasher Server, which can be exploited by malicious users to bypass certain security restrictions.

The problem is caused due to an error within the LDAP authentication and can be exploited to bypass the authentication and access the spam emails of another user.

Successful exploitation requires knowledge of a valid username and that MailWasher Server is integrated into an AD domain or LDAP repository.

The security issue is reported in version 2.2.

Solution
Update to version 2.2.1.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=515127

Deep Links
Links available to Secunia VIM customers