eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Egroupware | Egroupware | 1.0.1 (including) | 1.0.1 (including) |
| Egroupware | Egroupware | 1.0.6 (including) | 1.0.6 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html
- http://secunia.com/advisories/14940
- http://www.osvdb.org/15499
- http://www.securityfocus.com/bid/13137
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20088
- http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html
- http://secunia.com/advisories/14940
- http://www.osvdb.org/15499
- http://www.securityfocus.com/bid/13137
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20088