PT-2005-1402 · Infinite+1 · Infinite Mobile Delivery Webmail+1

Steven · CVE-2005-0324 · Published 2005-02-10 · Updated 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Infinite Mobile Delivery Webmail version 2.6

Description The issue allows remote attackers to gain sensitive information via an HTTP request containing invalid characters for a Windows folder name, which reveals the path in an error message.

Recommendations For Infinite Mobile Delivery Webmail version 2.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0324

Affected Products

Infinite Mobile Delivery Webmail

Windows

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-0324 · Security Note
• http://secunia.com/advisories/14075 · Note
• http://lovebug.org/imd_advisory.txt · Note
• http://marc.info/?l=bugtraq&m=110703630922262&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19154 · Note
• http://securitytracker.com/id?1013044 · Note
• http://securityfocus.com/bid/12399 · Note