CVEvulnerability

CVE-2004-1674

7.5 HIGH Published 2004-10-12 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-10-12
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter.

Affected configurations

• icewarp web mail 3.3.2 • icewarp web mail 5.2.7 • icewarp web mail 5.2.8 • merak mail server 7.4.5

References

http://marc.info/?l=bugtraq&m=109483971420067&w=2 marc.info
http://secunia.com/advisories/12789 Patch, Vendor Advisory
http://www.securityfocus.com/bid/11371 Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17976 exchange.xforce.ibmcloud.com
http://marc.info/?l=bugtraq&m=109483971420067&w=2 marc.info
http://secunia.com/advisories/12789 Patch, Vendor Advisory
http://www.securityfocus.com/bid/11371 Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17976 exchange.xforce.ibmcloud.com