CVE-2004-2584: Medium severity SmarterTools SmarterMail vulnerability
frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folder that SmarterMail cannot delete or rename via a folder name with a null byte ("%00"). NOTE: it is not clear whether this issue poses a vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2584?
The severity of CVE-2004-2584 is not clear, but it involves a potential issue with folder creation that could impact SmarterMail functionality.
How do I fix CVE-2004-2584?
To mitigate the issues posed by CVE-2004-2584, ensure that folder creation inputs are sanitized to prevent null byte injection.
Who is affected by CVE-2004-2584?
CVE-2004-2584 affects users of SmarterTools SmarterMail versions 1.6.1511 and 1.6.1529.
What impact does CVE-2004-2584 have on SmarterMail?
CVE-2004-2584 allows remote authenticated users to create folders that cannot be deleted or renamed, possibly hindering management of email folders.
Is CVE-2004-2584 a confirmed vulnerability?
It is not fully clear whether CVE-2004-2584 poses a confirmed vulnerability as it lacks detailed exploitation evidence.