CVE-2004-2458

UNKNOWN

Open WebMail 2

Published Aug 20, 2005

Modified 1 years ago

Details

Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.

References

WEB

http://openwebmail.org/openwebmail/download/cert/patches/SA-04:02/openwebmail.pl.patch

ADVISORY

http://secunia.com/advisories/11334

WEB

http://www.securityfocus.com/bid/10087

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/15822

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2004-2458

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedAug 20, 2005

ModifiedAug 8, 2024