CVE-2004-2547 in Surgemail
Summary
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
11/21/2005
Disclosure
12/31/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 23429 | Netwin Surgemail Error Message information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2004-2547 |