PatchTheCVEpostmaster vulnerabilities and fixes
Recent CVEs affecting postmaster, with upgrade or downgrade steps. 5 tracked.
postmaster has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-18. Highest priority: CVE-2005-1652 (score 45/100).
- CVE-2005-1653 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows re
- CVE-2005-1652 HIGH 7.5 DOWNGRADE message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by m
- CVE-2005-1651 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote at
- CVE-2005-1650 MEDIUM 5.0 DOWNGRADE The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending
- CVE-2000-1153 MEDIUM 5.0 DOWNGRADE PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message
FAQ
How do I fix postmaster vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is postmaster being exploited right now?
None of the tracked postmaster CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which postmaster CVE should I patch first?
CVE-2005-1652 currently ranks highest (45/100): message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by m.