PT-2006-1972 · Argosoft · Argosoft Mail Server Pro

Published 2006-02-28 · Updated 2018-10-18 · CVE-2006-0929

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ArGoSoft Mail Server Pro version 1.8.8.1

Description The issue allows remote authenticated users to create arbitrary folders via a .. (dot dot) in the RENAME command, which is a directory traversal vulnerability in the IMAP server.

Recommendations For version 1.8.8.1, consider restricting access to the RENAME command in the IMAP server until a patch is available. As a temporary workaround, monitor folder creation activities closely to detect and mitigate potential exploitation.

Fix

Related Identifiers

CVE-2006-0929

Affected Products

Argosoft Mail Server Pro

References · 7

• http://secunia.com/advisories/18990 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0929 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0929 · Note
• http://securityfocus.com/bid/16809 · Note
• http://nsag.ru/vuln/878.html · Note
• http://securityfocus.com/archive/1/425969/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/0733 · Note