What’s Vulnerable › Vulnerabilities

CVE-2018-5693

• Severity: low (CVSS 3.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-01-14 · updated 2026-06-17
• Weakness: CWE-532

Description

The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog.

Affected products

• Linuxmagic Magicspam: before 2.0.14-1 — fixed in 2.0.14-1

How to fix

Upgrade to a fixed version: Linuxmagic Magicspam 2.0.14-1. Check the vendor advisory for mitigations.

References

• http://forums.wizard.ca/viewtopic.php?f=17&t=236760
• https://www.vulnerability-lab.com/get_content.php?id=2113
• http://forums.wizard.ca/viewtopic.php?f=17&t=236760
• https://www.vulnerability-lab.com/get_content.php?id=2113

Get alerted when CVE-2018-5693 or the next vulnerability affects your stack