What’s Vulnerable › Vulnerabilities

CVE-2004-2577

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-12-31 · updated 2026-06-16

Description

The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts.

Affected products

• Phpgroupware: 0.9.16rc1, 0.9.16rc2

References

• http://www.osvdb.org/7618
• http://www.securityfocus.com/bid/12237
• https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227
• http://www.osvdb.org/7618
• http://www.securityfocus.com/bid/12237
• https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227

Get alerted when CVE-2004-2577 or the next vulnerability affects your stack