Approved changes feed: RSS · Atom

cpe:2.3:a:amax_information_technologies:magic_winmail_server:3.6:*:*:*:*:*:*:*

part: a version: 3.6 update: *

VendorAmax Information Technologies (2447af4a-cecb-5ada-a998-664cdc5d3c57)
ProductMagic Winmail Server (f808e551-1caf-595c-9e1a-8ab5fab37000)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-2572 vulnerable 2026-06-08 04:48:10.222556 Details available
AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid characters such as "()" or (2) a large number of characters in the Lookup field on the netaddressbook.php web form, which reveals the path in an ldaplib.php error message when the ldap_search function fails, due to improper processing of the $keyword variable.
Published: 2005-11-22T02:00:00.000Z
Updated: 2024-08-08T01:29:14.077Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.