Vulnerabilities > CVE-2004-2458 - Unspecified vulnerability in Open Webmail Open Webmail
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 6 |