cve-2004-2547
Vulnerability from cvelistv5
Published
2005-11-21 11:00
Modified
2024-08-08 01:29
Severity ?
Summary
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:29:14.042Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "surgemail-invalid-path-disclosure(16319)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16319"
          },
          {
            "name": "6745",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/6745"
          },
          {
            "name": "10483",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/10483"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt"
          },
          {
            "name": "20040603 Surgemail - Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html"
          },
          {
            "name": "11772",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/11772"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.netwinsite.com/surgemail/help/updates.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-06-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "surgemail-invalid-path-disclosure(16319)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16319"
        },
        {
          "name": "6745",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/6745"
        },
        {
          "name": "10483",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/10483"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt"
        },
        {
          "name": "20040603 Surgemail - Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html"
        },
        {
          "name": "11772",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/11772"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.netwinsite.com/surgemail/help/updates.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-2547",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "surgemail-invalid-path-disclosure(16319)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16319"
            },
            {
              "name": "6745",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/6745"
            },
            {
              "name": "10483",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/10483"
            },
            {
              "name": "http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt",
              "refsource": "MISC",
              "url": "http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt"
            },
            {
              "name": "20040603 Surgemail - Multiple Vulnerabilities",
              "refsource": "FULLDISC",
              "url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html"
            },
            {
              "name": "11772",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/11772"
            },
            {
              "name": "http://www.netwinsite.com/surgemail/help/updates.htm",
              "refsource": "CONFIRM",
              "url": "http://www.netwinsite.com/surgemail/help/updates.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-2547",
    "datePublished": "2005-11-21T11:00:00",
    "dateReserved": "2005-11-21T00:00:00",
    "dateUpdated": "2024-08-08T01:29:14.042Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.0c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"87817AF2-201D-4A00-BCA2-FDBF716BFB12\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.0d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B76EAC7A-4BB3-4E38-9101-C5382C010E16\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.1a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0EB0A419-82B9-4801-A6CA-AB01E2E27451\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.1b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B47ACEC-91A6-47DA-AF53-BB24A9A48B3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.1c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"54EA3FA5-305E-4FB1-88C2-96B3C60BDE96\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.1d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D744A39C-6695-4F05-8E0A-233A9F000464\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.2a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"78062477-35B1-490E-AA67-5B4D322B1684\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.2b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F5563478-FC8A-4FE6-9FA6-7A85A1D63827\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.2c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D5C2D087-9C3A-4D7A-83AB-5367C8CC6ED9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0490B62E-6F13-40E8-AB75-7B6D88BDBF81\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3a_rc1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E5C49C51-FE9B-490B-B901-57D37735CCE8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3246EA70-861C-4D6F-A1BF-4BCBB5FF933A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"85FBF22E-94A9-429D-A879-78EE00FA2EB0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FE3E637-1198-4B4D-8A5B-F7E5DC48A8EF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3e:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0AB1AE7C-16A2-4D85-BF27-82140DFFF631\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3f:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D052EED-AB9C-4EB6-A45B-29B2D125D0CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3g:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"550CED69-8A52-489E-B4AD-48C3B2C8DD13\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3h:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FEDC18DD-9D55-4D07-9157-5A925299FC02\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3i:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6A6BCA9B-569E-497F-8D51-7A953CA9EB79\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3j:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D7311BF0-CBCB-40F6-AB2B-014EC421DD9B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3k:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F5CCE110-187E-424E-8D2A-E2EAEDD1606C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.3l:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2260E333-8CCB-4536-B5F2-8885F8BB6B7A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.4a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5636090B-E382-42CF-8A05-0EE5BF36ACB4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.4b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"77DE0FB4-8AC2-487A-A73B-DBD9527657FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.4c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"49B0E240-B9E0-4CFD-852C-51E00B5E8ECB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.5a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0498C94D-B215-417A-971F-A2430393CAF0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.5b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7FEDBD88-3242-4FCA-949A-32B13CF7D89F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.5c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5484C012-9DE1-4F48-B467-5FC9577F7EBA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.5d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"66F4BC6E-0E24-49F9-9160-E3A346E37E0E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.5d2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"66D4C2B3-4879-461D-B57C-B59AFC6B6310\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.5f:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BECF5E0C-D2C0-4D6F-8FD6-BE6F0FA94887\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.6a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0575796D-59FC-4D55-B4BA-E4F332296CCA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.6b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7A3FEAAF-6DFE-4288-A3D2-7EFE64417C5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.6d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A65A9997-D18E-4FB9-9E54-C3C83A03047F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.6e:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"20FB3D3F-9BFC-441B-B974-AEB92C48D04E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.6e2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A38C61D1-36CB-4A2F-B8AB-E12729915A5A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.7a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBDA0620-DBE8-4659-8B23-F300735F7078\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.7b3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C30D2CEC-CB08-4454-9305-A96BB92830CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51F3F0B2-8A75-42A6-9B4C-E1C2AA8EF27C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"06B04968-6115-48D0-A315-D0445234DA23\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A3213555-A5AC-4722-B2A9-26726803F813\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0EB5003E-B9BA-4DD0-98EE-C3AAFBF7BFB1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"96563C20-642A-47EA-8A4B-1DE9C1DD7377\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFAC85F6-EF7F-4051-AEC9-4FF21D77D1EA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"90487000-A5DA-463B-82B2-5F83DBEC7154\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netwin:webmail:3.1d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"282F56FD-7FAC-4450-B2EF-29DA7F27E83C\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.\"}]",
      "id": "CVE-2004-2547",
      "lastModified": "2024-11-20T23:53:38.037",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:P/I:N/A:N\", \"baseScore\": 2.6, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 4.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2004-12-31T05:00:00.000",
      "references": "[{\"url\": \"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://secunia.com/advisories/11772\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://www.netwinsite.com/surgemail/help/updates.htm\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.osvdb.org/6745\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://www.securityfocus.com/bid/10483\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/16319\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://secunia.com/advisories/11772\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://www.netwinsite.com/surgemail/help/updates.htm\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.osvdb.org/6745\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://www.securityfocus.com/bid/10483\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/16319\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2004-2547\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2004-12-31T05:00:00.000\",\"lastModified\":\"2024-11-20T23:53:38.037\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:P/I:N/A:N\",\"baseScore\":2.6,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":4.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.0c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87817AF2-201D-4A00-BCA2-FDBF716BFB12\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.0d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B76EAC7A-4BB3-4E38-9101-C5382C010E16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EB0A419-82B9-4801-A6CA-AB01E2E27451\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B47ACEC-91A6-47DA-AF53-BB24A9A48B3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.1c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54EA3FA5-305E-4FB1-88C2-96B3C60BDE96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.1d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D744A39C-6695-4F05-8E0A-233A9F000464\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78062477-35B1-490E-AA67-5B4D322B1684\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.2b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5563478-FC8A-4FE6-9FA6-7A85A1D63827\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.2c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5C2D087-9C3A-4D7A-83AB-5367C8CC6ED9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0490B62E-6F13-40E8-AB75-7B6D88BDBF81\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3a_rc1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5C49C51-FE9B-490B-B901-57D37735CCE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3246EA70-861C-4D6F-A1BF-4BCBB5FF933A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85FBF22E-94A9-429D-A879-78EE00FA2EB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FE3E637-1198-4B4D-8A5B-F7E5DC48A8EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AB1AE7C-16A2-4D85-BF27-82140DFFF631\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D052EED-AB9C-4EB6-A45B-29B2D125D0CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3g:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"550CED69-8A52-489E-B4AD-48C3B2C8DD13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3h:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEDC18DD-9D55-4D07-9157-5A925299FC02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3i:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A6BCA9B-569E-497F-8D51-7A953CA9EB79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3j:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7311BF0-CBCB-40F6-AB2B-014EC421DD9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3k:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5CCE110-187E-424E-8D2A-E2EAEDD1606C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.3l:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2260E333-8CCB-4536-B5F2-8885F8BB6B7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5636090B-E382-42CF-8A05-0EE5BF36ACB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.4b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77DE0FB4-8AC2-487A-A73B-DBD9527657FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.4c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49B0E240-B9E0-4CFD-852C-51E00B5E8ECB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0498C94D-B215-417A-971F-A2430393CAF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.5b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FEDBD88-3242-4FCA-949A-32B13CF7D89F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.5c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5484C012-9DE1-4F48-B467-5FC9577F7EBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.5d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66F4BC6E-0E24-49F9-9160-E3A346E37E0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.5d2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66D4C2B3-4879-461D-B57C-B59AFC6B6310\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.5f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BECF5E0C-D2C0-4D6F-8FD6-BE6F0FA94887\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.6a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0575796D-59FC-4D55-B4BA-E4F332296CCA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.6b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A3FEAAF-6DFE-4288-A3D2-7EFE64417C5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.6d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A65A9997-D18E-4FB9-9E54-C3C83A03047F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.6e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"20FB3D3F-9BFC-441B-B974-AEB92C48D04E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.6e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A38C61D1-36CB-4A2F-B8AB-E12729915A5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.7a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBDA0620-DBE8-4659-8B23-F300735F7078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.7b3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C30D2CEC-CB08-4454-9305-A96BB92830CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51F3F0B2-8A75-42A6-9B4C-E1C2AA8EF27C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06B04968-6115-48D0-A315-D0445234DA23\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3213555-A5AC-4722-B2A9-26726803F813\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EB5003E-B9BA-4DD0-98EE-C3AAFBF7BFB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96563C20-642A-47EA-8A4B-1DE9C1DD7377\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFAC85F6-EF7F-4051-AEC9-4FF21D77D1EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90487000-A5DA-463B-82B2-5F83DBEC7154\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netwin:webmail:3.1d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"282F56FD-7FAC-4450-B2EF-29DA7F27E83C\"}]}]}],\"references\":[{\"url\":\"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://secunia.com/advisories/11772\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://www.netwinsite.com/surgemail/help/updates.htm\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.osvdb.org/6745\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://www.securityfocus.com/bid/10483\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/16319\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://secunia.com/advisories/11772\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://www.netwinsite.com/surgemail/help/updates.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.osvdb.org/6745\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://www.securityfocus.com/bid/10483\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/16319\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.