Vulnerability in Icewarp Web Mail
CVE-2005-0321
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path.
EPSS: 0.007 (48.5th percentile) — read the EPSS interpretation.
Affected products
- Icewarp Web_mail — versions 5.3.0
- Merak Mail_server — versions 7.6.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)