Field Assessment
AI analysis pending.
CVE
CVE-2004-2458
Severity
MEDIUM
CVSS
5
EPSS
1.35%
Original Filing — NVD Description
Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.