CVE-2005-3132 MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the....
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icewarp web mail | = 5.5.1 | No fix listed |
| merak mail server | = 8.2.4r | No fix listed |
References
- 20050930 Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 mailing-list
- 17046 third-party-advisory vendor-advisory
- ADV-2005-1933 vdb-entry