Back to search
CVE-2004-2458
Published: Aug 20, 2005
Modified: Aug 8, 2024
PUBLISHED
Description
Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
10087
vdb-entry
x_refsource_BID
open-webmail-directory-creation(15822)
vdb-entry
x_refsource_XF
11334
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now