Email Attachment Leak in eGroupWare Affects User Privacy
CVE-2005-1129

Currently unrated

Key Information:

Vendor

eGroupWare

Status
eGroupWare
Vendor
CVE Published:
2 May 2005

What is CVE-2005-1129?

In eGroupWare versions 1.0.6 and earlier, a serious flaw exists where attachments that are not sent with an email are inadvertently sent with the next outgoing email. This behavior can lead to sensitive or confidential information being exposed to unintended recipients, thereby creating privacy concerns for users. This vulnerability underscores the importance of rigorous email management and the potential risks associated with software misconfigurations.

References

http://secunia.com/advisories/14940
third-party-advisoryx_refsource_SECUNIA
http://archives.neohapsis.com/archives/bugtraq/2005-04/01...
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/20088
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.