CVE-2005-3132: Medium severity merak mail server vulnerability
MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlistinc.html, which reveals the path in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3132?
CVE-2005-3132 has a medium severity due to its potential for information disclosure.
How do I fix CVE-2005-3132?
To fix CVE-2005-3132, upgrade to the latest version of the Merak Mail Server and IceWarp Web Mail to ensure the vulnerability is patched.
What systems are affected by CVE-2005-3132?
CVE-2005-3132 affects Merak Mail Server version 8.2.4r and IceWarp Web Mail version 5.5.1, along with possibly earlier versions.
What type of attack does CVE-2005-3132 represent?
CVE-2005-3132 represents an information disclosure vulnerability that allows remote attackers to reveal sensitive paths.
Can CVE-2005-3132 be exploited remotely?
Yes, CVE-2005-3132 can be exploited remotely by making a direct request to a specific file.