PT-2004-2576 · Icewarp · Merak Mail Server

Shineshadow · Published 2004-09-10 · Updated 2017-07-11 · CVE-2004-1670

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Merak Mail Server version 7.4.5

Description The issue allows remote attackers to create arbitrary directories or rename arbitrary files. This can be achieved by exploiting directory traversal vulnerabilities, specifically by using a .. (dot dot) in the user parameter to viewaction.html or a ....// (doubled dot dot) in the folderold or folder parameters to folders.html.

Recommendations For Merak Mail Server version 7.4.5, consider restricting access to the viewaction.html and folders.html endpoints until a patch is available. As a temporary workaround, avoid using the user, folderold, and folder parameters in the affected API endpoints.

Fix

Related Identifiers

CVE-2004-1670

Affected Products

Merak Mail Server

References · 5

• http://securityfocus.com/bid/11371 · Vendor Advisory
• http://secunia.com/advisories/12789 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1670 · Security Note
• http://marc.info/?l=bugtraq&m=109483971420067&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17314 · Note