Unscored CVE-2005-1490 EUVD-2005-1493GHSA-2ggv-947x-gfhx

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determi…

Published May 11, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html.

References

20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 mailing-list
15249 third-party-advisory
merak-icewarp-file-existence(20472) vdb-entry