Lucene search

[email protected]CVE-2004-1670

HistoryFeb 20, 2005 - 5:00 a.m.

CVE-2004-1670

2005-02-2005:00:00

[email protected]

web.nvd.nist.gov

cve

2004

1670

directory traversal

vulnerability

merak mail server

icewarp web mail

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a … (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a …// (doubled dot dot) in the folderold or folder parameters to folders.html.

Affected configurations

NVD

Node

icewarpweb_mailMatch3.3.2

icewarpweb_mailMatch5.2.7

icewarpweb_mailMatch5.2.8

merakmail_serverMatch7.4.5

VendorProductVersionCPE
icewarpweb_mail3.3.2cpe:/a:icewarp:web_mail:3.3.2:::
icewarpweb_mail5.2.8cpe:/a:icewarp:web_mail:5.2.8:::
merakmail_server7.4.5cpe:/a:merak:mail_server:7.4.5:::
icewarpweb_mail5.2.7cpe:/a:icewarp:web_mail:5.2.7:::

Vendor	Product	Version	CPE
icewarp	web_mail	3.3.2	cpe:/a:icewarp:web_mail:3.3.2:::
icewarp	web_mail	5.2.8	cpe:/a:icewarp:web_mail:5.2.8:::
merak	mail_server	7.4.5	cpe:/a:merak:mail_server:7.4.5:::
icewarp	web_mail	5.2.7	cpe:/a:icewarp:web_mail:5.2.7:::

References

marc.info/?l=bugtraq&m=109483971420067&w=2

secunia.com/advisories/12789

www.securityfocus.com/bid/11371

exchange.xforce.ibmcloud.com/vulnerabilities/17314

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

Related for CVE-2004-1670

cvelist1 nvd1 nessus1