CVE-2005-4559 mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings var...
MediumCVSS 5.0
EPSS 8.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings variables when an unrecognized HTTP_USER_AGENT string is provided, which allows remote attackers to access arbitrary files via a request with an unrecognized User Agent that also specifies the desired default_layout and layout_settings parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deerfield visnetic mail server | = 8.3.0_build1 | No fix listed |
| icewarp web mail | = 5.5.1 | No fix listed |
| merak mail server | = 8.3.0r | No fix listed |
References
- 20051227 Secunia Research: IceWarp Web Mail Multiple File mailing-list
- 17046 patch third-party-advisory vendor-advisory
- 17865 third-party-advisory
- secunia.com vendor-advisory
- 299 third-party-advisory
- 1015412 vdb-entry
- 22082 vdb-entry
- 20051227 Secunia Research: IceWarp Web Mail Multiple File InclusionVulnerabilities mailing-list
- 16069 vdb-entry
- visnetic-information-disclosure(23907) vdb-entry