MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mailpost | Tips | 5.1.1_sv (including) | 5.1.1_sv (including) |
References
- http://www.kb.cert.org/vuls/id/858726
- http://www.procheckup.com/security_info/vuln_pr0409.html
- http://www.securityfocus.com/bid/11595
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17952
- http://www.kb.cert.org/vuls/id/858726
- http://www.procheckup.com/security_info/vuln_pr0409.html
- http://www.securityfocus.com/bid/11595
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17952