ID CVE-2006-4491
Summary Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:cybozu:collaborex:*:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:collaborex:*:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:cybozu_ag:1.2\(1.4\):*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:cybozu_ag:1.2\(1.4\):*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:cybozu_pocket:5.2\(0.7\):*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:cybozu_pocket:5.2\(0.7\):*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:garoon_1:1.5\(4.0\):*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:garoon_1:1.5\(4.0\):*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:mailwise:3.0\(0.2\):*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:mailwise:3.0\(0.2\):*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 11-11-2008 - 06:28)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:N/A:N
refmap via4
confirm http://cybozu.co.jp/products/dl/notice_060825/
jvn JVN#90420168
osvdb 28262
sectrack 1016759
secunia
  • 21638
  • 21656
Last major update 11-11-2008 - 06:28
Published 31-08-2006 - 22:04
Last modified 11-11-2008 - 06:28
Back to Top