OSVDB ID: 13374

Title: IceWarp WebMail calendar_m.html id Variable Path Disclosure

Info

Disclosure
Jan 28, 2005

Discovery
Unknown

Dates

Exploit
Jan 28, 2005

Solution
Unknown

Description

 IceWarp Web Mail contains a flaw that may lead to an unauthorized information disclosure.  The issue is triggered when improper parameters are provided to the calendar_m.html script, which will disclose the physical web path resulting in a loss of confidentiality.

Classification

 Location: Remote/Network Access Required
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Exploit: Exploit Available
OSVDB: Web Related

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Merak Mail Server, Inc.

Merak Mail Server

 7.6.0
7.6.4r

IceWarp Web Mail

 5.3.0
5.3.2

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/36218