ID CVE-2006-0929
Summary Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. (dot dot) in the RENAME command.
References
Vulnerable Configurations
  • cpe:2.3:a:argosoft:argosoft_mail_server:1.8.8.1:*:pro:*:*:*:*:*
    cpe:2.3:a:argosoft:argosoft_mail_server:1.8.8.1:*:pro:*:*:*:*:*
CVSS
Base: 4.0 (as of 18-10-2018 - 16:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:N/I:P/A:N
refmap via4
bid 16809
bugtraq 20060224 NSA Group Security Advisory NSAG-¹200-24.02.2006 Vulnerability ArGoSoft Mail Server Pro IMAP
misc http://www.nsag.ru/vuln/878.html
secunia 18990
vupen ADV-2006-0733
Last major update 18-10-2018 - 16:29
Published 28-02-2006 - 11:02
Last modified 18-10-2018 - 16:29
Back to Top