CVE Details for CVE: CVE-2004-1102
Summary
MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:30 |
| Published | 10-01-2005 - 05:00 |
| Last modified | 11-07-2017 - 01:30 |
CWE
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| PARTIAL | NONE | NONE |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 11599 |
| cert-vn | VU#306086 |
| misc | http://www.procheckup.com/security_info/vuln_pr0408.html |
| xf | mailpost-get-info-disclosure(17954) |