CVE-2004-1721 The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| merak mail server | = 5.2.7 | No fix listed |
References
- 20040817 Vulnerabilities in Merak Webmail Server mailing-list
- packetstormsecurity.nl patch vendor-advisory
- 12269 patch third-party-advisory vendor-advisory
- 1010969 vdb-entry
- 9045 patch vdb-entry vendor-advisory
- 10966 patch vdb-entry vendor-advisory
- merak-view-php-files(17029) vdb-entry