CVE-2018-5693 The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog.
LowCVSS 3.3
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linuxmagic magicspam | < 2.0.14-1 | 2.0.14-1 |
References
- forums.wizard.ca vendor-advisory
- www.vulnerability-lab.com exploit third-party-advisory