CVE-2004-2458

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.

Affected (6)

Products: Open Webmail: Open Webmail

Open Webmail

1 product

Open Webmail

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Open Webmail Open Webmail	Version 1.71
Open Webmail Open Webmail	Version 1.7
Open Webmail Open Webmail	Version 1.81
Open Webmail Open Webmail	Version 1.8
Open Webmail Open Webmail	Version 1.90
Open Webmail Open Webmail	Version 2.30