{"id":"CVE-2004-1103","aliases":["EUVD-2004-1101","GHSA-hrm7-mvc2-hxq3"],"status":"published","title":"MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote...","description":"MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02763,"percentile":0.86381,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-12-01T05:00:00Z","modified":"2026-06-16T22:07:01Z","products":[{"vendor":"tips","product":"mailpost"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17952","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.procheckup.com/security_info/vuln_pr0409.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/11595","tags":["vdb-entry","x_refsource_BID","x_transferred","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/858726","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1103"},{"url":"https://github.com/advisories/GHSA-hrm7-mvc2-hxq3"}],"sources":{"cve":[{"id":"CVE-2004-1103","description":"MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.","status":"published","published":"2004-12-01T05:00:00Z","modified":"2024-08-08T00:39:00.902Z","updated_at":"2026-11-02T14:34:54.398187Z"}],"euvd":[{"id":"EUVD-2004-1101","description":"MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.","status":"published","published":"2004-12-01T05:00:00Z","modified":"2024-08-08T00:39:00Z","updated_at":"2026-11-03T01:15:16.148157Z"}],"ghsa":[{"id":"GHSA-hrm7-mvc2-hxq3","title":"MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote...","description":"MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.","status":"published","published":"2022-04-29T02:58:57Z","modified":"2023-01-30T05:03:20Z","updated_at":"2026-11-02T14:46:49.034004Z"}],"nvd":[{"id":"CVE-2004-1103","description":"MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.","status":"published","published":"2005-01-10T05:00:00Z","modified":"2026-06-16T22:07:01.737Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.133049Z"}]}}