Openfind MailGates/MailAudit CRLF Injection Vulnerability Allowing Unauthenticated File Read

A CRLF injection vulnerability has been identified in Openfind's MailGates/MailAudit, specifically in versions 6.0 prior to 6.1.10.054 and 5.0 prior to 5.2.10.099. This vulnerability allows unauthenticated remote attackers to inject carriage return and line feed characters, potentially leading to the manipulation of HTTP headers. Exploitation of this vulnerability could enable attackers to read sensitive system files.

Impact

Exploitation of this vulnerability could result in unauthorized access to system files, potentially leading to further exploitation or information disclosure.

Remediation

Users of MailGates/MailAudit 6.0 should update to version 6.1.10.054 or later. Users of MailGates/MailAudit 5.0 should update to version 5.2.10.099 or later.