Login Request a demo
Unscored severity · published Aug 17, 2004
CVE-2004-1721
The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000
–
CVSS
2.4%
EPSS
No
On KEV
Description
The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Mail Server · Merak
5.2.7 · source: NVD
Affected product
MS
Mail Server
Merak
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1721
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1721
marc.info
http://marc.info/?l=bugtraq&m=109279057326044&w=2
Patch
http://packetstormsecurity.nl/0408-exploits/merak527.txt
Patch
http://secunia.com/advisories/12269
securitytracker.com
http://securitytracker.com/id?1010969
Patch
http://www.osvdb.org/9045
Patch
http://www.securityfocus.com/bid/10966
More from Mail Server
–
CVE-2006-0818
Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows…
–
CVE-2006-0817
Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows…
–
CVE-2005-4556
PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is…
–
CVE-2005-4559
mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout…
–
CVE-2005-4558
IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter…