CVE-2004-1674: High severity IceWarp Web Mail vulnerability
viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1674?
CVE-2004-1674 is classified as a critical vulnerability due to its potential for remote file deletion and manipulation.
How do I fix CVE-2004-1674?
To fix CVE-2004-1674, upgrade Merak Mail Server to version 7.4.6 or Icewarp Web Mail to the latest available version.
What systems are affected by CVE-2004-1674?
CVE-2004-1674 affects Merak Mail Server version 7.4.5 and Icewarp Web Mail versions 5.2.7, 5.2.8, and likely others.
What can attackers do with CVE-2004-1674?
Attackers can exploit CVE-2004-1674 to delete or move arbitrary files on the server, posing a significant security risk.
Is CVE-2004-1674 still a threat today?
CVE-2004-1674 remains a threat if affected versions of the software are still in use without proper updates or patches.