Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2005-4559
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-28 Dec, 2005 | 11:03
Updated At-16 Apr, 2026 | 00:27

mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings variables when an unrecognized HTTP_USER_AGENT string is provided, which allows remote attackers to access arbitrary files via a request with an unrecognized User Agent that also specifies the desired default_layout and layout_settings parameters.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
Type: Primary
Version: 2.0
Base score: 5.0
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
CPE Matches
deerfield
deerfield
>>visnetic_mail_server>>8.3.0_build1
cpe:2.3:a:deerfield:visnetic_mail_server:8.3.0_build1:*:*:*:*:*:*:*
icewarp
icewarp
>>web_mail>>5.5.1
cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*
merak
merak
>>mail_server>>8.3.0r
cpe:2.3:a:merak:mail_server:8.3.0r:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://marc.info/?l=full-disclosure&m=113570229524828&w=2cve@mitre.org
N/A
http://secunia.com/advisories/17046cve@mitre.org
Patch
Vendor Advisory
http://secunia.com/advisories/17865cve@mitre.org
N/A
http://secunia.com/secunia_research/2005-62/advisory/cve@mitre.org
Vendor Advisory
http://securityreason.com/securityalert/299cve@mitre.org
N/A
http://securitytracker.com/id?1015412cve@mitre.org
N/A
http://www.osvdb.org/22082cve@mitre.org
N/A
http://www.securityfocus.com/archive/1/420255/100/0/threadedcve@mitre.org
N/A
http://www.securityfocus.com/bid/16069cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/23907cve@mitre.org
N/A
http://marc.info/?l=full-disclosure&m=113570229524828&w=2af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/17046af854a3a-2127-422b-91ae-364da2661108
Patch
Vendor Advisory
http://secunia.com/advisories/17865af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/secunia_research/2005-62/advisory/af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securityreason.com/securityalert/299af854a3a-2127-422b-91ae-364da2661108
N/A
http://securitytracker.com/id?1015412af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.osvdb.org/22082af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/archive/1/420255/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/16069af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/23907af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://marc.info/?l=full-disclosure&m=113570229524828&w=2
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/17046
Source: cve@mitre.org
Resource:
Patch
Vendor Advisory
Hyperlink: http://secunia.com/advisories/17865
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/secunia_research/2005-62/advisory/
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://securityreason.com/securityalert/299
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://securitytracker.com/id?1015412
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.osvdb.org/22082
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/420255/100/0/threaded
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/16069
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/23907
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://marc.info/?l=full-disclosure&m=113570229524828&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/17046
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Vendor Advisory
Hyperlink: http://secunia.com/advisories/17865
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/secunia_research/2005-62/advisory/
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://securityreason.com/securityalert/299
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://securitytracker.com/id?1015412
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.osvdb.org/22082
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/420255/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/16069
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/23907
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found