CVE Details for CVE: CVE-2004-1103
Summary
MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:30 |
| Published | 10-01-2005 - 05:00 |
| Last modified | 11-07-2017 - 01:30 |
CWE
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| PARTIAL | NONE | NONE |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 11595 |
| cert-vn | VU#858726 |
| misc | http://www.procheckup.com/security_info/vuln_pr0409.html |
| xf | mailpost-information-disclosure(17952) |