CVE-2004-1720

CVE-2004-1720 concerns Merak Mail Server 5.2.7 where an invalid HTTP request on address.html (and possibly calendar.html) can reveal the installation path via web logs or responses. The NVD entry notes partial confidentiality impact with a base score of 5.0 (MEDIUM). Connected documents also desc...

CVE-2004-1720

The 1 address.html and possibly 2 calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web log...