low2.1
CVE-2005-0321
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html,…
Impact
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icewarp | Web Mail | Version 5.3.0 |
| Merak | Mail Server | Version 7.6.0 |