Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2004-2577

The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts.

Published: Dec 31, 2004
Updated: Nov 9, 2025
CVE: CVE-2004-2577
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
phpgroupware / phpgroupware	0.9.16rc1	0.9.16rc1.x
phpgroupware / phpgroupware	0.9.16rc2	0.9.16rc2.x

http://www.osvdb.org/7618
http://www.securityfocus.com/bid/12237
https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo