1. CVE-Search
  2. CVE-2006-2917
ID CVE-2006-2917
Summary Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY, (6) APPEND, and (7) LIST commands.
References
Vulnerable Configurations
  • cpe:2.3:a:qbik:wingate:6.1.2.1094:*:*:*:*:*:*:*
    cpe:2.3:a:qbik:wingate:6.1.2.1094:*:*:*:*:*:*:*
  • cpe:2.3:a:qbik:wingate:6.1.3.1096:*:*:*:*:*:*:*
    cpe:2.3:a:qbik:wingate:6.1.3.1096:*:*:*:*:*:*:*
CVSS
Base: 5.5 (as of 08-03-2011 - 02:37)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:P/A:N
refmap via4
bid 18908
misc
secunia 20707
vupen ADV-2006-2730
Last major update 08-03-2011 - 02:37
Published 10-07-2006 - 19:05
Last modified 08-03-2011 - 02:37
Back to Top