CVE-2004-1721 - The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attack

CVE-2004-1721

Summary

The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.

References

http://marc.info/?l=bugtraq&m=109279057326044&w=2
http://packetstormsecurity.nl/0408-exploits/merak527.txt
http://secunia.com/advisories/12269
http://securitytracker.com/id?1010969
http://www.osvdb.org/9045
http://www.securityfocus.com/bid/10966
https://exchange.xforce.ibmcloud.com/vulnerabilities/17029

Vulnerable Configurations

cpe:2.3:a:merak:mail_server:5.2.7:*:*:*:*:*:*:*
cpe:2.3:a:merak:mail_server:5.2.7:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	10966
bugtraq	20040817 Vulnerabilities in Merak Webmail Server
misc	http://packetstormsecurity.nl/0408-exploits/merak527.txt
osvdb	9045
sectrack	1010969
secunia	12269
xf	merak-view-php-files(17029)

Last major update

11-07-2017 - 01:31

Published

17-08-2004 - 04:00

Last modified

11-07-2017 - 01:31