Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

eGroupWare may attach previous file to new email

CVE-2005-1129 · published 21 years ago
Summary

In eGroupWare versions up to 1.0.6, if a user creates an email with an attachment and then cancels it, the attachment can be automatically included in the next email they send. This can unintentionally expose confidential files to the wrong recipient. Update to a newer version or apply the provided patch to stop the attachment from being carried over.

Original advisory text
eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong...
eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Timeline
Published2 May 2005
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2005-1129 · NVD
Track software like this
Free during beta