Atmail

atmail

Vendor: Calacode • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2008-3579

1Calacode

1Atmail

Apr 23, 2026

Aug 10, 2008

N/A· v4

N/A· v3

7.8 HIGH· v2

Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows remote attackers to obtain sensitive information by creating and downloading a backup archive of the entire @Mail directory tree. NOTE: this can be leveraged for remote exploitation of CVE-2008-3395. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less

CVE-2008-3395

1Calacode

1Atmail

Apr 23, 2026

Jul 31, 2008

N/A· v4

N/A· v3

5.0 MEDIUM· v2

Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php and (2) webmail/webadmin/.htpasswd, which allows local users to obtain sensitive information by reading these files. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less