medium5.0Public exploit code
CVE-2004-1102
MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TIPS MailPost 5.1.1 - Remote File Enumeration2004-11-03 · webapps · cgi · Verified
Impact
MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tips | Mailpost | Version 5.1.1_sv |
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/306086
- http://www.procheckup.com/security_info/vuln_pr0408.html
- http://www.securityfocus.com/bid/11599
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17954
- http://www.kb.cert.org/vuls/id/306086
- http://www.procheckup.com/security_info/vuln_pr0408.html
- http://www.securityfocus.com/bid/11599
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17954