PT-2005-2145 · Egroupware · Egroupware

Publicado 2005-04-16 · Atualizado 2017-07-11 · CVE-2005-1129

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions eGroupWare versions 1.0.6 and earlier

Description The issue allows an attachment to be sent in the next email if an email with an attachment is composed but not sent. This may lead to sensitive information being sent to the wrong recipient.

Recommendations For versions 1.0.6 and earlier, as a temporary workaround, consider disabling the email composition feature with attachments until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-1129

Produtos afetados

Egroupware

Referências · 7

• http://secunia.com/advisories/14940 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1129 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20088 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html · Nota
• http://securityfocus.com/bid/13137 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1129 · Nota de Segurança
• http://osvdb.org/15499 · Nota