TITLE:
IceWarp Web Mail Various Weaknesses

SECUNIA ADVISORY ID:
SA14078

VERIFY ADVISORY:
http://secunia.com/advisories/14078/

CRITICAL:
Not critical

IMPACT:
Exposure of system information, Exposure of sensitive information

WHERE:
>From remote

SOFTWARE:
Merak Mail Server 7.x
http://secunia.com/product/3798/
Merak Email Server 5.x
http://secunia.com/product/1730/

DESCRIPTION:
ShineShadow has reported two weaknesses in IceWarp Web Mail, which
can be exploited by malicious users to gain knowledge of certain
system information or sensitive information.

1) An error message containing the absolute installation path is
returned, when a malicious user accesses "calendar_d.html",
"calendar_m.html", "calendar_w.html", and "calendar_y.html" directly
with a valid session ID in the "id" parameter.

The weakness has been reported in versions 5.3.2 and 5.3.0. Other
versions may also be affected.

2) User credentials are stored obfuscated and with weak encryption in
the files "users.cfg", "settings.cfg", "user.dat", and "users.dat" and
are readable by any local user on the system.

The weakness has been reported in versions 5.3.0 and 5.3.2. Other
versions may also be affected.

NOTE: Some other issues, which don't affect version 5.3.2, have also
been reported in version 5.3.0.

SOLUTION:
Update to version 5.3.2 (included in Merak Mail Server 7.6.4r) and
grant only trusted users access to affected systems and the web mail
functionality.

PROVIDED AND/OR DISCOVERED BY:
ShineShadow

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------