CVE-2005-4556: High severity Deerfield Visnetic Mail Server vulnerability

Published Dec 28, 2005

Updated

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when registerglobals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the (1) langsettings and (2) language parameters in (a) accounts/inc/include.php and (b) admin/inc/include.php.

Affected Software

3 affected components

Deerfield Visnetic Mail Server=8.3.0_build1

IceWarp Web Mail=5.5.1

Merak Mail Server=8.3.0r

Remediation

Patch Available

http://secunia.com/advisories/17046

Event History

Dec 28, 2005

CVE Published

11:03 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4556?

CVE-2005-4556 has a high severity rating as it allows remote code execution if exploited.

How do I fix CVE-2005-4556?

To fix CVE-2005-4556, disable register_globals in your PHP configuration or apply a patch provided by the vendor.

Which software is affected by CVE-2005-4556?

CVE-2005-4556 affects IceWarp Web Mail 5.5.1, Merak Mail Server 8.3.0r, and VisNetic Mail Server 8.3.0 build 1.

Can CVE-2005-4556 lead to data loss?

Yes, exploitation of CVE-2005-4556 may lead to unauthorized access and potential data loss.

Is there a workaround for CVE-2005-4556?

A temporary workaround for CVE-2005-4556 is to limit PHP file inclusion to trusted sources until a full fix can be applied.