IceWarp Merak Mail Server Unspecified Auto Responder File Path Vulnerability
BID:12169
Info
IceWarp Merak Mail Server Unspecified Auto Responder File Path Vulnerability
| Bugtraq ID: | 12169 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 22 2000 12:00AM |
| Updated: | Nov 22 2000 12:00AM |
| Credit: | This vulnerability was announced by the vendor. |
| Vulnerable: |
IceWarp Merak Mail Server 2.1 0.360 IceWarp Merak Mail Server 2.1 0.290 IceWarp Merak Mail Server 2.1 0.280 |
| Not Vulnerable: |
IceWarp Merak Mail Server 3.0 0.100 |
Discussion
IceWarp Merak Mail Server Unspecified Auto Responder File Path Vulnerability
IceWarp Merak Mail Server is reportedly affected by an unspecified vulnerability regarding the file path option in 'Auto Responder' of the 'Web Admin' interface.
The vendor has reportedly addressed this issue in IceWarp Merak Mail 3.00.100 by removing the file path option. It is likely that any earlier versions that include the file path option are affected by this vulnerability.
IceWarp Merak Mail Server is reportedly affected by an unspecified vulnerability regarding the file path option in 'Auto Responder' of the 'Web Admin' interface.
The vendor has reportedly addressed this issue in IceWarp Merak Mail 3.00.100 by removing the file path option. It is likely that any earlier versions that include the file path option are affected by this vulnerability.
Exploit / POC
IceWarp Merak Mail Server Unspecified Auto Responder File Path Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
IceWarp Merak Mail Server Unspecified Auto Responder File Path Vulnerability
Solution:
The vendor has addressed this issue in IceWarp Merak Mail Server 3.00.100 and later.
IceWarp Merak Mail Server 2.1 0.290
IceWarp Merak Mail Server 2.1 0.360
IceWarp Merak Mail Server 2.1 0.280
Solution:
The vendor has addressed this issue in IceWarp Merak Mail Server 3.00.100 and later.
IceWarp Merak Mail Server 2.1 0.290
-
IceWarp Merak Mail Server Latest Downloadable Version
http://www.icewarp.com/download/merak.zip
IceWarp Merak Mail Server 2.1 0.360
-
IceWarp Merak Mail Server Latest Downloadable Version
http://www.icewarp.com/download/merak.zip
IceWarp Merak Mail Server 2.1 0.280
-
IceWarp Merak Mail Server Latest Downloadable Version
http://www.icewarp.com/download/merak.zip
References
IceWarp Merak Mail Server Unspecified Auto Responder File Path Vulnerability
References:
References: