5

CVE-2004-1720

Exploit

The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web logs that may only be available to the administrators, who would have access to the path through legitimate means.

Data is provided by the National Vulnerability Database (NVD)
Merak ≫ Mail Server Version7.4.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 9.09% 0.918
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
http://secunia.com/advisories/12269
Patch
Vendor Advisory
Exploit
http://www.securityfocus.com/bid/10966
Patch
Vendor Advisory
Exploit
http://www.osvdb.org/9043
Patch
Vendor Advisory
Exploit