PT-2005-2145 · Egroupware · Egroupware

Published 2005-04-16 · Updated 2017-07-11 · CVE-2005-1129

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions eGroupWare versions 1.0.6 and earlier

Description The issue allows an attachment to be sent in the next email if an email with an attachment is composed but not sent. This may lead to sensitive information being sent to the wrong recipient.

Recommendations For versions 1.0.6 and earlier, as a temporary workaround, consider disabling the email composition feature with attachments until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-1129

Affected Products

Egroupware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-1129 · Security Note
• http://secunia.com/advisories/14940 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1129 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20088 · Note
• http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html · Note
• http://securityfocus.com/bid/13137 · Note
• http://osvdb.org/15499 · Note