PT-2007-4875 · Maia · Maia Mailguard

Adriel T. Desautels · Publicado 2007-07-09 · Atualizado 2012-10-31 · CVE-2007-3620

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Maia Mailguard versions 1.0.2 and earlier

Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This can be achieved by including a .. (dot dot) in various parameters to specific API endpoints, such as the prevlang and super parameters to "php/login.php", the charset parameter to "php/login.php", "php/internal-init.php", and "php/xlogin.php", the lang parameter to "php/internal-init.php", and the language parameter to "php/xlogin.php".

Recommendations For Maia Mailguard versions 1.0.2 and earlier, consider restricting access to the affected API endpoints, such as "php/login.php", "php/internal-init.php", and "php/xlogin.php", until a patch is available. As a temporary workaround, avoid using the prevlang, super, charset, lang, and language parameters in the affected endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-3620

Produtos afetados

Maia Mailguard

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-3620 · Nota de Segurança
• http://osvdb.org/37886 · Nota
• http://maiamailguard.org/maia/changeset/1184 · Nota
• http://osvdb.org/37887 · Nota
• http://vupen.com/english/advisories/2007/2456 · Nota
• http://secunia.com/advisories/25951 · Aviso do Fabricante
• http://maiamailguard.org/maia/ticket/479 · Nota
• http://osvdb.org/37885 · Nota