CVE Vulnerabilities

CVE-2004-2458

Published: Dec 31, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.

Affected Software

Name Vendor Start Version End Version
Open_webmail Open_webmail 1.7 1.7
Open_webmail Open_webmail 1.8 1.8
Open_webmail Open_webmail 1.71 1.71
Open_webmail Open_webmail 1.81 1.81
Open_webmail Open_webmail 1.90 1.90
Open_webmail Open_webmail 2.30 2.30

References