CVE-2004-2577

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts.

Affected (2)

Products: Phpgroupware: Phpgroupware

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Phpgroupware Phpgroupware	Version 0.9.16rc1
Phpgroupware Phpgroupware	Version 0.9.16rc2

References (6)

http://www.osvdb.org/7618

Source: cve@mitre.org

http://www.securityfocus.com/bid/12237

Source: cve@mitre.org

Patch

https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227

Source: cve@mitre.org

http://www.osvdb.org/7618

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/12237

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.