PT-2007-4875 · Maia · Maia Mailguard

Adriel T. Desautels · Published 2007-07-09 · Updated 2012-10-31 · CVE-2007-3620

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Maia Mailguard versions 1.0.2 and earlier

Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This can be achieved by including a .. (dot dot) in various parameters to specific API endpoints, such as the prevlang and super parameters to "php/login.php", the charset parameter to "php/login.php", "php/internal-init.php", and "php/xlogin.php", the lang parameter to "php/internal-init.php", and the language parameter to "php/xlogin.php".

Recommendations For Maia Mailguard versions 1.0.2 and earlier, consider restricting access to the affected API endpoints, such as "php/login.php", "php/internal-init.php", and "php/xlogin.php", until a patch is available. As a temporary workaround, avoid using the prevlang, super, charset, lang, and language parameters in the affected endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-3620

Affected Products

Maia Mailguard

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-3620 · Security Note
• http://secunia.com/advisories/25951 · Vendor Advisory
• http://osvdb.org/37886 · Note
• http://maiamailguard.org/maia/changeset/1184 · Note
• http://osvdb.org/37887 · Note
• http://vupen.com/english/advisories/2007/2456 · Note
• http://maiamailguard.org/maia/ticket/479 · Note
• http://osvdb.org/37885 · Note