Info

Disclosure

Mar 01, 2004

Discovery

Mar 01, 2004

Dates

Exploit

Unknown

Solution

Unknown

Description

Magic Winmail Server contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered because the LDapLib.PHP file does not properly filter user input, which will disclose installation path information resulting in a loss of confidentiality.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Confidentiality
Exploit: Exploit Available
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

AMAX Information Technologies Inc.

Magic Winmail Server

3.6

References

Bugtraq ID: 9786
Other Advisory URL: http://members.lycos.co.uk/r34ct/main/ldaplib/ldaplib.php%20reveal%20local%20path ......
ISS X-Force ID: 15361
Secunia Advisory ID: 11015
CVE ID: 2004-2572 (see also: NVD)
Vendor URL: http://www.magicwinmail.net/
Keyword: Magic,Winmail,Disclosure

Credit

Dr_insane - dr_insanepathfinder.gr - Personal Page

Direct URL: http://osvdb.org/36218