mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak…

published 2004-12-01 21 y ago modified 2026-06-16 4 mo ago also EUVD-2004-1099

cvss: 5.8; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 6.0%; EPSS 6.0% chance of exploitation in 30 days, percentile 93%
public exploits: 1; Exploit-DB

mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.

Timeline

2004-11-03 First public exploit (EDB-24722)
2004-12-01 Published

Exploit prediction

6.04% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-24722 TIPS MailPost 5.1.1 - Error Message Cross-Site Scripting webapps, 2004-11-03
securityfocus.com http://www.securityfocus.com/bid/11598 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	5.8	AV:N/AC:M/Au:N/C:P/I:N/A:P

References

securityfocus.com /bid/11598
vdb-entry, exploit, vendor-advisory
procheckup.com /security_info/vuln_pr0411.html
kb.cert.org /vuls/id/596046
third-party-advisory, us-government-resource
exchange.xforce.ibmcloud.com /vulnerabilities/17951
vdb-entry

Sources

CVE List CVE-2004-1101
NVD CVE-2004-1101

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary