Description
eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient.
References
- 14940 third-party-advisory
- 20050412 eGroupWare Leaks Files mailing-list
- egroupware-email-information-disclosure(20088) vdb-entry
- 13137 vdb-entry
- 15499 vdb-entry