IceWarp Merak Mail Server Unspecified Web Admin Vulnerability

Bugtraq ID:	12164
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 18 2002 12:00AM
Updated:	Sep 18 2002 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	IceWarp Merak Mail Server 5.1.2
Not Vulnerable:	IceWarp Merak Mail Server 5.1.3

IceWarp Merak Mail Server Unspecified Web Admin Vulnerability

IceWarp Merak Mail is reportedly affected by a vulnerability regarding the 'Domain Admin' and the ODBC account list in the Web admin interface.

The vendor has released very little information about this vulnerability other than to state IceWarp Merak Mail 5.1.3 addresses the issue. IceWarp Merak Mail 5.1.2 is reportedly vulnerable; earlier versions may also be vulnerable though this has not been confirmed.

IceWarp Merak Mail Server Unspecified Web Admin Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IceWarp Merak Mail Server Unspecified Web Admin Vulnerability

Solution:
The vendor has addressed this issue in IceWarp Merak Mail Server 5.1.3 and later.


IceWarp Merak Mail Server 5.1.2

• IceWarp Merak Mail Server Latest Downloadable Version
  http://www.icewarp.com/download/merak.zip

IceWarp Merak Mail Server Unspecified Web Admin Vulnerability

References:

• Merak Mail Server for Windows 2003/2K/XP/NT/9x/ME Release notes. (IceWarp)
  
• Merak Mail Server Homepage (IceWarp)