CVE-2005-1489 Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html,...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html, (2) calendar_event.html, or (3) calendar_task.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icewarp web mail | = 5.4.2 | No fix listed |
| merak mail server | = 8.0.3 | No fix listed |
References
- 20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 mailing-list
- 15249 patch third-party-advisory
- merak-icewarp-script-path-disclosure(20469) vdb-entry