PT-2000-1291 · Atrium · Atrium Mercur Mail Server

Published 2000-04-21 · Updated 2008-09-10 · CVE-2000-0318

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Atrium Mercur Mail Server version 3.2

Description The issue allows local attackers to read other users' email and create arbitrary files via a dot dot (..) attack. This attack involves manipulating file paths to access or modify files outside the intended directory.

Recommendations For Atrium Mercur Mail Server version 3.2, consider restricting local access to the mail server to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the ability of local users to create arbitrary files on the server. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0318

Affected Products

Atrium Mercur Mail Server

References · 3

• 🔥 http://securityfocus.com/bid/1144 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0318 · Security Note
• http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0057.html · Note