First published: Tue Oct 04 2005(Updated: )
MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the path in an error message.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Merak Mail Server | =8.2.4r | |
IceWarp Web Mail | =5.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-3132 has a medium severity due to its potential for information disclosure.
To fix CVE-2005-3132, upgrade to the latest version of the Merak Mail Server and IceWarp Web Mail to ensure the vulnerability is patched.
CVE-2005-3132 affects Merak Mail Server version 8.2.4r and IceWarp Web Mail version 5.5.1, along with possibly earlier versions.
CVE-2005-3132 represents an information disclosure vulnerability that allows remote attackers to reveal sensitive paths.
Yes, CVE-2005-3132 can be exploited remotely by making a direct request to a specific file.