CVE:CVE-2005-1490
CNNVD:CNNVD-200505-980
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2，当mailbox.dat文件不存在时，远程认证用户可以通过传给attachment.html的文件夹参数来测定一个文件是否存在。
solution:Upgrade icewarp web_mail to a higher version than 5.4.2,and avoid the version 5.4.2; Upgrade merak mail_server to a higher version than 8.0.3,and avoid the version 8.0.3