IceWarp Merak Mail Server Autoresp.HTML Unspecified Vulnerability

Bugtraq ID:	12144
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 07 2003 12:00AM
Updated:	Sep 07 2003 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	IceWarp Merak Mail Server 6.0.7 IceWarp Merak Mail Server 5.3.2 IceWarp Merak Mail Server 5.3 .0
Not Vulnerable:	IceWarp Merak Mail Server 6.1 .0

IceWarp Merak Mail Server Autoresp.HTML Unspecified Vulnerability

IceWarp Merak Mail Server is reportedly vulnerable to an unspecified security issue in 'autoresp.html'. This issue is most likely due to the application failing to properly sanitize user-supplied input.

The vendor has addressed this issue in IceWarp Merak Mail Server 6.1.0 and later.

IceWarp Merak Mail Server Autoresp.HTML Unspecified Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IceWarp Merak Mail Server Autoresp.HTML Unspecified Vulnerability

Solution:
The vendor has addressed this issue in IceWarp Merak Mail Server 6.1.0 and later.


IceWarp Merak Mail Server 5.3 .0

• IceWarp Merak Mail Server Latest Downloadable Version
  http://www.icewarp.com/download/merak.zip

IceWarp Merak Mail Server 5.3.2

• IceWarp Merak Mail Server Latest Downloadable Version
  http://www.icewarp.com/download/merak.zip

IceWarp Merak Mail Server 6.0.7

• IceWarp Merak Mail Server Latest Downloadable Version
  http://www.icewarp.com/download/merak.zip

IceWarp Merak Mail Server Autoresp.HTML Unspecified Vulnerability

References:

• Merak Mail Server for Windows 2003/2K/XP/NT/9x/ME Release notes. (IceWarp)
  
• Merak Mail Server Homepage (IceWarp)