PT-2006-1207 · Rockliffe · Rockliffe Mailsite

Published 2006-01-09 · Updated 2011-03-08 · CVE-2006-0127

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Rockliffe MailSite versions prior to 6.1.22.1

Description: The issue allows remote authenticated users to rename the folders of other users via a .. (dot dot) in the RENAME command, due to a directory traversal vulnerability in the IMAP service.

Recommendations: For versions prior to 6.1.22.1, update to version 6.1.22.1 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2006-0127

Affected Products

Rockliffe Mailsite

References · 7

• 🔥 http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html · Exploit
• 🔥 http://osvdb.org/22229 · Exploit
• http://secunia.com/advisories/18318 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0127 · Security Note
• http://vupen.com/english/advisories/2006/0055 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041039.html · Note