CVE

Id
9529  
CVE No.
CVE-2004-1101  
Status
Candidate  
Description
mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.  
Phase
Assigned (20041130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
64495 9529 CVE-2004-1101 CERT-VN:VU#596046  View
64496 9529 CVE-2004-1101 URL:http://www.kb.cert.org/vuls/id/596046  View
64497 9529 CVE-2004-1101 MISC:http://www.procheckup.com/security_info/vuln_pr0411.html  View
64498 9529 CVE-2004-1101 BID:11598  View
64499 9529 CVE-2004-1101 URL:http://www.securityfocus.com/bid/11598  View
64500 9529 CVE-2004-1101 XF:mailpost-slash-xss(17951)  View

Related JVN