PT-2006-1972 · Argosoft · Argosoft Mail Server Pro

Publicado 2006-02-28 · Atualizado 2018-10-18 · CVE-2006-0929

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ArGoSoft Mail Server Pro version 1.8.8.1

Description The issue allows remote authenticated users to create arbitrary folders via a .. (dot dot) in the RENAME command, which is a directory traversal vulnerability in the IMAP server.

Recommendations For version 1.8.8.1, consider restricting access to the RENAME command in the IMAP server until a patch is available. As a temporary workaround, monitor folder creation activities closely to detect and mitigate potential exploitation.

Correção

Identificadores relacionados

CVE-2006-0929

Produtos afetados

Argosoft Mail Server Pro

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0929 · Nota
• http://secunia.com/advisories/18990 · Aviso do Fabricante
• http://securityfocus.com/bid/16809 · Nota
• http://nsag.ru/vuln/878.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0929 · Nota de Segurança
• http://securityfocus.com/archive/1/425969/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/0733 · Nota