Merak Mail Server Arbitrary File Deletion Vulnerability

Bugtraq ID:	14988
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 30 2005 12:00AM
Updated:	Sep 30 2005 12:00AM
Credit:	ShineShadow is credited with the discovery of this vulnerability.
Vulnerable:	Merak Mail Server 8.2.4 r
Not Vulnerable:

Merak Mail Server Arbitrary File Deletion Vulnerability

Merak Mail Server is affected by an arbitrary file deletion vulnerability. This issue arises due to an input validation error allowing an attacker to delete files in the context of the Web server running the application.

An attacker can exploit this issue to cause a denial of service condition due to data corruption.

Merak Mail Server version 8.2.4r is affected by this vulnerability.

Merak Mail Server Arbitrary File Deletion Vulnerability

An exploit is not required.

Example URI have been provided:

http://www.example.com:32000/mail/logout.html?id=[relative path]
http://www.example.com:32000/mail/logout.html?id=[relative path]%00blabla

Merak Mail Server Arbitrary File Deletion Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Merak Mail Server Arbitrary File Deletion Vulnerability

References:

• Webmail Server Software Home Page (Merak)
  
• Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 ([email protected])