CVE-2005-1490 Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.ht...
LowCVSS 2.1
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icewarp web mail | = 5.4.2 | No fix listed |
| merak mail server | = 8.0.3 | No fix listed |
References
- 20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 mailing-list
- 15249 third-party-advisory
- merak-icewarp-file-existence(20472) vdb-entry