CVE

Id
10148  
CVE No.
CVE-2004-1720  
Status
Candidate  
Description
The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web logs that may only be available to the administrators, who would have access to the path through legitimate means.  
Phase
Assigned (20050226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
69714 10148 CVE-2004-1720 BUGTRAQ:20040817 Vulnerabilities in Merak Webmail Server  View
69715 10148 CVE-2004-1720 URL:http://marc.info/?l=bugtraq&m=109279057326044&w=2  View
69716 10148 CVE-2004-1720 MISC:http://packetstormsecurity.nl/0408-exploits/merak527.txt  View
69717 10148 CVE-2004-1720 BID:10966  View
69718 10148 CVE-2004-1720 URL:http://www.securityfocus.com/bid/10966  View
69719 10148 CVE-2004-1720 OSVDB:9043  View
69720 10148 CVE-2004-1720 URL:http://www.osvdb.org/9043  View
69721 10148 CVE-2004-1720 SECTRACK:1010969  View
69722 10148 CVE-2004-1720 URL:http://securitytracker.com/id?1010969  View
69723 10148 CVE-2004-1720 SECUNIA:12269  View
69724 10148 CVE-2004-1720 URL:http://secunia.com/advisories/12269  View
69725 10148 CVE-2004-1720 XF:merak-address-calendar-path-disclosure(17027)  View

Related JVN