PT-2005-5227 · Icewarp · Icewarp Web Mail+2

Published 2005-12-28 · Updated 2018-10-19 · CVE-2005-4557

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IceWarp Web Mail version 5.5.1 Merak Mail Server version 8.3.0r VisNetic Mail Server version 8.3.0 build 1

Description The issue allows remote attackers to include arbitrary local files via a null byte (%00) in the lang parameter, possibly due to a directory traversal vulnerability. This could potentially lead to unauthorized access to sensitive information.

Recommendations For IceWarp Web Mail version 5.5.1, consider restricting access to the dir/include.html file until a patch is available. For Merak Mail Server version 8.3.0r, avoid using the lang parameter in the affected endpoint until the issue is resolved. For VisNetic Mail Server version 8.3.0 build 1, restrict access to the vulnerable module to minimize the risk of exploitation. As a temporary workaround, consider disabling the inclusion of local files via the lang parameter until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-4557

Affected Products

Icewarp Web Mail

Merak Mail Server

Visnetic Mail Server

References · 11

• 🔥 http://secunia.com/advisories/17046 · Exploit
• 🔥 http://securityfocus.com/bid/16069 · Exploit
• 🔥 http://secunia.com/secunia_research/2005-62/advisory · Exploit
• 🔥 https://exploit-db.com/exploits/26981 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4557 · Security Note
• http://securitytracker.com/id?1015412 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23897 · Note
• http://marc.info/?l=full-disclosure&m=113570229524828&w=2 · Note
• http://securityfocus.com/archive/1/420255/100/0/threaded · Note
• http://secunia.com/advisories/17865 · Note
• http://osvdb.org/22079 · Note