PT-2005-5226 · Icewarp · Icewarp Web Mail+2

Published 2005-12-28 · Updated 2018-10-19 · CVE-2005-4556

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IceWarp Web Mail version 5.5.1 Merak Mail Server version 8.3.0r VisNetic Mail Server version 8.3.0 build 1

Description The issue allows remote attackers to include arbitrary local and remote PHP files via a URL in the lang settings and language parameters in certain PHP files, specifically in accounts/inc/include.php and admin/inc/include.php, when register globals is enabled.

Recommendations For IceWarp Web Mail version 5.5.1, consider disabling the register globals setting to prevent exploitation. For Merak Mail Server version 8.3.0r, restrict access to the accounts/inc/include.php and admin/inc/include.php files until a fix is available. For VisNetic Mail Server version 8.3.0 build 1, avoid using the lang settings and language parameters in the affected API endpoints until the issue is resolved. As a temporary workaround, consider restricting the use of the include.php files in the affected directories to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-4556

Affected Products

Icewarp Web Mail

Merak Mail Server

Visnetic Mail Server

References · 12

• 🔥 http://secunia.com/advisories/17046 · Exploit
• 🔥 https://exploit-db.com/exploits/26980 · Exploit
• 🔥 http://securityfocus.com/bid/16069 · Exploit
• 🔥 http://secunia.com/secunia_research/2005-62/advisory · Exploit
• 🔥 https://exploit-db.com/exploits/26979 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4556 · Security Note
• http://osvdb.org/22078 · Note
• http://securitytracker.com/id?1015412 · Note
• http://osvdb.org/22077 · Note
• http://marc.info/?l=full-disclosure&m=113570229524828&w=2 · Note
• http://securityfocus.com/archive/1/420255/100/0/threaded · Note
• http://secunia.com/advisories/17865 · Note