Vulnerability in Icewarp Web Mail

CVE-2005-1489

Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html, (2) calendar_event.html, or (3) calendar_task.html.

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

Affected products

Icewarp Web_mail — versions 5.4.2
Merak Mail_server — versions 8.0.3
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Patch, x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)