PT-2005-5228 · Icewarp+1 · Icewarp Web Mail+2

Published 2005-12-28 · Updated 2018-10-19 · CVE-2005-4558

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IceWarp Web Mail version 5.5.1 Merak Mail Server version 8.3.0r VisNetic Mail Server version 8.3.0 build 1

Description The issue allows remote authenticated users to include arbitrary PHP code via a URL in a modified lang settings parameter to "mail/index.html". This is due to the lack of proper restriction on acceptable values for the language parameter to "mail/settings.html" before it is stored in a database.

Recommendations For IceWarp Web Mail version 5.5.1, restrict access to the lang settings parameter in the "mail/index.html" endpoint until a patch is available. For Merak Mail Server version 8.3.0r, consider disabling the modification of the language parameter to "mail/settings.html" to prevent exploitation. For VisNetic Mail Server version 8.3.0 build 1, avoid using the lang settings parameter in the "mail/index.html" endpoint until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2005-4558

Affected Products

Icewarp Web Mail

Merak Mail Server

Visnetic Mail Server

References · 13

• 🔥 http://secunia.com/advisories/17046 · Exploit
• 🔥 http://securityfocus.com/bid/16069 · Exploit
• 🔥 http://secunia.com/secunia_research/2005-62/advisory · Exploit
• 🔥 https://exploit-db.com/exploits/26982 · Exploit
• 🔥 https://exploit-db.com/exploits/26983 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4558 · Security Note
• http://securitytracker.com/id?1015412 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23904 · Note
• http://osvdb.org/22080 · Note
• http://marc.info/?l=full-disclosure&m=113570229524828&w=2 · Note
• http://secunia.com/advisories/17865 · Note
• http://securityfocus.com/archive/1/420255/100/0/threaded · Note
• http://osvdb.org/22081 · Note