PT-2006-5291 · Cybozu · Cybozu Collaborex+3

ž³Æ² Æ° + 1 · Published 2006-08-31 · Updated 2008-11-11 · CVE-2006-4491

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Collaborex versions prior to 1.2(1.5) Cybozu AG Pocket versions prior to 5.2(0.8) Cybozu Mailwise versions prior to 3.0(0.3) Cybozu Garoon 1 versions prior to 1.5(4.1)

Description A directory traversal issue allows remote authenticated users to read arbitrary files via unspecified vectors.

Recommendations For Cybozu Collaborex versions prior to 1.2(1.5), update to version 1.2(1.5) or later. For Cybozu AG Pocket versions prior to 5.2(0.8), update to version 5.2(0.8) or later. For Cybozu Mailwise versions prior to 3.0(0.3), update to version 3.0(0.3) or later. For Cybozu Garoon 1 versions prior to 1.5(4.1), update to version 1.5(4.1) or later.

Fix

Related Identifiers

CVE-2006-4491

Affected Products

Cybozu Ag Pocket

Cybozu Collaborex

Cybozu Garoon 1

Cybozu Mailwise

References · 8

• http://cybozu.co.jp/products/dl/notice_060825 · Patch
• http://secunia.com/advisories/21638 · Vendor Advisory
• http://securitytracker.com/id?1016759 · Patch
• http://jvn.jp/jp/JVN%2390420168/index.html · Patch
• http://secunia.com/advisories/21656 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4491 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4491 · Note
• http://osvdb.org/28262 · Note