CVE-2004-1671 : Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitiv

Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html.

Published 2004-10-12 04:00:00

Updated 2017-07-11 01:31:15

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2004-1671

EPSS FAQ

0.50%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 74 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2004-1671

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

Products affected by CVE-2004-1671

Icewarp » Web Mail » Version: 3.3.2
cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*
Matching versions
Icewarp » Web Mail » Version: 5.2.7
cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*
Matching versions
Icewarp » Web Mail » Version: 5.2.8
cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2004-1671

Exploit prediction scoring system (EPSS) score for CVE-2004-1671

CVSS scores for CVE-2004-1671

References for CVE-2004-1671

Products affected by CVE-2004-1671