PT-2005-1402 · Infinite+1 · Infinite Mobile Delivery Webmail+1

Steven · Publicado 2005-02-10 · Atualizado 2024-02-14 · CVE-2005-0324

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Infinite Mobile Delivery Webmail version 2.6

Description The issue allows remote attackers to gain sensitive information via an HTTP request containing invalid characters for a Windows folder name, which reveals the path in an error message.

Recommendations For Infinite Mobile Delivery Webmail version 2.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-0324

Produtos afetados

Infinite Mobile Delivery Webmail

Windows

Referências · 7

• http://secunia.com/advisories/14075 · Nota
• http://lovebug.org/imd_advisory.txt · Nota
• http://marc.info/?l=bugtraq&m=110703630922262&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19154 · Nota
• http://securitytracker.com/id?1013044 · Nota
• http://securityfocus.com/bid/12399 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0324 · Nota de Segurança