PT-2005-5227 · Icewarp · Icewarp Web Mail+2

Publicado 2005-12-28 · Atualizado 2018-10-19 · CVE-2005-4557

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IceWarp Web Mail version 5.5.1 Merak Mail Server version 8.3.0r VisNetic Mail Server version 8.3.0 build 1

Description The issue allows remote attackers to include arbitrary local files via a null byte (%00) in the lang parameter, possibly due to a directory traversal vulnerability. This could potentially lead to unauthorized access to sensitive information.

Recommendations For IceWarp Web Mail version 5.5.1, consider restricting access to the dir/include.html file until a patch is available. For Merak Mail Server version 8.3.0r, avoid using the lang parameter in the affected endpoint until the issue is resolved. For VisNetic Mail Server version 8.3.0 build 1, restrict access to the vulnerable module to minimize the risk of exploitation. As a temporary workaround, consider disabling the inclusion of local files via the lang parameter until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-4557

Produtos afetados

Icewarp Web Mail

Merak Mail Server

Visnetic Mail Server

Referências · 11

• 🔥 http://secunia.com/advisories/17046 · Exploit
• 🔥 http://securityfocus.com/bid/16069 · Exploit
• 🔥 http://secunia.com/secunia_research/2005-62/advisory · Exploit
• 🔥 https://exploit-db.com/exploits/26981 · Exploit
• http://securitytracker.com/id?1015412 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23897 · Nota
• http://marc.info/?l=full-disclosure&m=113570229524828&w=2 · Nota
• http://securityfocus.com/archive/1/420255/100/0/threaded · Nota
• http://secunia.com/advisories/17865 · Nota
• http://osvdb.org/22079 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4557 · Nota de Segurança