CVE:CVE-2005-1491
CNNVD:CNNVD-200505-984
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2允许远程认证用户(1)通过viewaction.html来移动其home目录或者(2)通过传给importaction.html的importfile参数来移动任意文件。
solution:Upgrade icewarp web_mail to a higher version than 5.4.2,and avoid the version 5.4.2; Upgrade merak mail_server to a higher version than 8.0.3,and avoid the version 8.0.3