CVE-2004-1673: High severity IceWarp Web Mail vulnerability
accountsettingsadd.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1673?
CVE-2004-1673 is considered a high-severity vulnerability due to its potential for unauthorized file creation.
How do I fix CVE-2004-1673?
To fix CVE-2004-1673, update the IceWarp Web Mail Server to the latest patched version to ensure the vulnerability is mitigated.
Which versions are affected by CVE-2004-1673?
CVE-2004-1673 affects IceWarp Web Mail versions 5.2.7, 5.2.8, and 3.3.2.
What kind of attack vector is involved in CVE-2004-1673?
CVE-2004-1673 allows remote attackers to exploit the vulnerability via the accountid parameter to create text files with arbitrary content.
Is CVE-2004-1673 exploitable over the network?
Yes, CVE-2004-1673 is exploitable remotely over the network by sending crafted requests to the vulnerable server.