CVE-2005-1489

Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html, (2) calendar_event.html, or (3) calendar_task.html.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-11

Last modified

2024-08-07

Affected products

• Web Mail (Icewarp)
• Mail Server (Merak)

References

• http://marc.info/?l=bugtraq&m=111530933016434&w=2
• http://secunia.com/advisories/15249
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20469