high7.5
CVE-2004-1673
accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with ar…
Impact
accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icewarp | Web Mail | Versions 3.3.2, 5.2.7, 5.2.8 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109483971420067&w=2
- http://secunia.com/advisories/12789
- http://www.securityfocus.com/bid/11371
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17317
- http://marc.info/?l=bugtraq&m=109483971420067&w=2
- http://secunia.com/advisories/12789
- http://www.securityfocus.com/bid/11371
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17317