CVE-2004-2577

The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain…

published November 28, 2005

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01409 · 72.4th percentile
Published
2005-11-28T23:00Z
EPSS history
Timeline
  • 28 NOV 23:00Z
    The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain…
    cvelistv5