Register | Log In
Download Contact
News > Security Policy > Security bulletin no.40

Mail function can result in unauthorized email access

Published: June 14, 2010

Version: 1.0

Maximum Severity Rating: Low

Background

DotNetNuke added support for user messaging in 5.3.0.

Issue Summary

The code for the user messaging module was attached to the (now legacy) Mail.Send function, meaning mails were delivered to the message store instead of always being emailed. The user messaging store is keyed off the email address meaning that a potential hacker could impersonate another user and potentially receive their emails.

Mitigating factors

1. The user messaging module is only available to logged in users. If your site contains a controlled set of users i.e. does not allow public or verifed registration then this issue is greatly mitigated. In cases where a site has a single user the issue obviously is non existant.

2. This mail function delivers to the first result, which may or may not be the correct user. Depending on the user configuration, mails may always go to the correct user.

Affected DotNetNuke versions

5.3.0 - 5.4.2

Non-Affected Versions:

All others

Fix(s) for issue

To fix this problem, you are recommended to update to the latest version of DotNetNuke (5.4.3 at time of writing).

Acknowledgments

Roger Selwyn

Security Policy

Click here to read more details on the DotNetNuke Security Policy

Attend A Webinar
Start Professional Edition Trial
Have Someone Contact Me

Like Us on Facebook Join our Network on LinkedIn Follow DNN Corporate on Twitter Follow DNN on Twitter

Advertisers

Sponsors

DotNetNuke Corporation

DotNetNuke (DNN) provides a suite of solutions that make designing, building and managing feature-rich sites and communities fast, easy and cost-effective. The DotNetNuke Platform CMS is the foundation for more than one million websites worldwide. DNN Social, our newest solution, enables businesses to create immersive, interactive communities. Thousands of organizations like True Value Hardware, Bose, Cornell University, Glacier Water, Dannon, Delphi, USAA, NASCAR, Northern Health and the City of Denver have leveraged DNN to deploy highly engaging business- critical websites. Our rapid growth in product sales and deployments resulted in DotNetNuke Corp. being named one of the fastest growing private companies in America by Inc. Magazine in 2011 and 2012.
Copyright © 2002-2013 DotNetNuke Corp. / Terms of Use / Privacy
Hosted by MaximumASP