CVE-2004-2385

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://members.lycos.co.uk/r34ct/main/emu/emu.txtExploit, Vendor Advisory
http://secunia.com/advisories/11110Vendor Advisory
http://www.osvdb.org/4203Exploit
http://www.securityfocus.com/bid/9861Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15453
http://members.lycos.co.uk/r34ct/main/emu/emu.txtExploit, Vendor Advisory
http://secunia.com/advisories/11110Vendor Advisory
http://www.osvdb.org/4203Exploit
http://www.securityfocus.com/bid/9861Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15453

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-23867.5Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute ar CVE-2004-23877.5Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbi CVE-2004-238810.0rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be over CVE-2004-23895.0Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denia CVE-2004-23905.0The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and la CVE-2004-23915.0Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message wi CVE-2004-23925.0libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failure CVE-2004-23937.5Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allo CVE-2004-23942.1Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password inste CVE-2004-23952.1Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts f CVE-2004-23967.2passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe an CVE-2004-23977.5The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the k