Vulnerability Note VU#306086

MailPost vulnerable file system information disclosure via HTTP GET request

Overview

A vulnerability is reported to exist in MailPost version 5.1.1sv and possibly earlier versions that may permit a remote attacker to verify the existance of files anywhere on the local system.

I. Description

According to the ProCheckUp report, MailPost contains a vulnerability that may permit a remote attacker to verify the existance of files anywhere on the server's filesystem. By sending a malformed HTTP GET query string to the script, an attacker can determine whether or not a file is present on the target machine.

II. Impact

This information could be used to determine sensitive information about the server's environment.

III. Solution

The CERT/CC is currently unaware of a practical solution to this problem.

It may be possible to mitigate this vulnerability by modifying the information returned in error messages.

Systems Affected

Vendor	Status	Date Updated
MailPost	Vulnerable	3-Nov-2004

References

http://www.procheckup.com/security_info/vuln_pr0408.html

Credit

Thanks to ProCheckUp for reporting this vulnerability.

This document was written by Jason A Rafail and is based on information provided by ProCheckUp.

Other Information

Date Public	11/03/2004
Date First Published	11/03/2004 11:50:58 AM
Date Last Updated	11/03/2004
CERT Advisory
CVE Name
US-CERT Technical Alerts
Metric	3.00
Document Revision	3

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader