CVE-2005-4558 IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.htm...
MediumCVSS 6.5
EPSS 8.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.html before it is stored in a database, which can allow remote authenticated users to include arbitrary PHP code via a URL in a modified lang_settings parameter to mail/index.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deerfield visnetic mail server | = 8.3.0_build1 | No fix listed |
| icewarp web mail | = 5.5.1 | No fix listed |
| merak mail server | = 8.3.0r | No fix listed |
References
- 20051227 Secunia Research: IceWarp Web Mail Multiple File mailing-list
- 17046 exploit patch third-party-advisory vendor-advisory
- 17865 third-party-advisory
- secunia.com exploit vendor-advisory
- 1015412 vdb-entry
- 22080 vdb-entry
- 22081 vdb-entry
- 20051227 Secunia Research: IceWarp Web Mail Multiple File InclusionVulnerabilities mailing-list
- 16069 exploit vdb-entry
- visnetic-settings-file-include(23904) vdb-entry