CVEブラウザに戻る

CVE-2005-1284

HIGH

7.5

CVSS Severity Score

EPSS Score0.0940%

EPSS Percentile38.11th

Published2005年5月2日

Last Modified2026年4月16日

Vulnerability Description

The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.

Affected Platforms (CPE)

📦

Argosoft

Argosoft Mail Server

= 1.8.7.6

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=111419001527077&w=2

🔗 http://www.osvdb.org/15822

🔗 http://www.securityfocus.com/bid/13323

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/20228

🔗 http://marc.info/?l=bugtraq&m=111419001527077&w=2

🔗 http://www.osvdb.org/15822

🔗 http://www.securityfocus.com/bid/13323

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/20228

関連する脆弱性情報

CVE-2005-12837.5

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbi...

CVE-2017-152235.3

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources (m...

CVE-2002-10045.0

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attacke...

CVE-2002-10055.0

ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwarding the em...