CVE-2004-1673

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=109483971420067&w=2
http://secunia.com/advisories/12789Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/11371Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17317
http://marc.info/?l=bugtraq&m=109483971420067&w=2
http://secunia.com/advisories/12789Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/11371Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17317

Timeline

Published: Oct 12, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-16747.5viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arb CVE-2004-16755.0Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command wit CVE-2004-16767.5Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a c CVE-2004-16775.0pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname informati CVE-2004-16785.0Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute CVE-2004-16795.0Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (triple dot) in the (1) C CVE-2004-16805.0application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (Vx CVE-2004-16817.2Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow CVE-2004-168210.0Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifier CVE-2004-16833.7A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a CVE-2004-16845.0Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive informat CVE-2004-16857.5SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authenticatio