CVE-2004-2458 | BDVDB-2026-12205 Detail

Description#

Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://openwebmail.org/openwebmail/download/cert/patches/SA-04:02/openwebmail.pl.patch
http://www.securityfocus.com/bid/10087
https://exchange.xforce.ibmcloud.com/vulnerabilities/15822
http://secunia.com/advisories/11334

Exploit#

No public exploit known

History#

Version 12005-08-20Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.