CVE-2005-1490: Low severity IceWarp Web Mail vulnerability
Published May 11, 2005
·Updated
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html.
Affected Software
2 affected components
IceWarp Web Mail=5.4.2
Merak Mail Server=8.0.3
Event History
May 11, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1490?
CVE-2005-1490 has been classified as a medium severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2005-1490?
To fix CVE-2005-1490, ensure that appropriate file access controls and validation checks are implemented in the application.
3
What versions are affected by CVE-2005-1490?
CVE-2005-1490 affects Merak Mail Server 8.0.3 and Icewarp Web Mail 5.4.2.
4
Can CVE-2005-1490 be exploited remotely?
Yes, CVE-2005-1490 can be exploited by remote authenticated users.
5
What does CVE-2005-1490 expose to an attacker?
CVE-2005-1490 allows attackers to determine the existence of files on the server through specific application parameters.