CVE-2004-1102: MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether th...

Security readout for executives and security teams

MailPost 5.1.1sv, and possibly earlier versions, can reveal whether requested files exist by returning different error messages. This is an information disclosure issue, not described as direct system takeover. Business risk depends on whether any legacy MailPost instance remains reachable, especially from the internet. Exposure is most likely in legacy environments still running MailPost 5.1.1sv or earlier, particularly if web-facing. Modern environments without MailPost are unlikely to be affected. Treat this as a legacy exposure check. It is not proven actively exploited in the supplied sources, but internet-facing legacy software that leaks file information should be found and reduced quickly. Mitigation focus: Inventory systems for MailPost 5.1.1sv or earlier.; Remove or retire MailPost if it is no longer required.; Restrict access to trusted networks or authenticated users..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.