VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 12, 2004· Updated Jun 16, 2026

CVE-2004-1672

CVE-2004-1672

Description

attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • IceWarp/WebMail4 versions
    cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*
    • (no CPE)range: =5.2.7
  • Merak/Mail Serverllm-fuzzy
    Range: =7.4.5

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.