NetSight
IP …
low2.6Public exploit code

CVE-2004-2547

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) speci…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.

Affected products

VendorProductAffected versions
NetwinSurgemail
Versions 1.0c, 1.0d, 1.1a, 1.1b, 1.1c, 1.1d
NetwinWebmail
Version 3.1d

References