CVE-2005-3691

Опубликовано: 19 нояб. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the (1) create or (2) rename commands.

Ссылки

http://secunia.com/advisories/17633
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-59/advisory/
Patch
Vendor Advisory
http://securitytracker.com/id?1015239
http://www.mailenable.com/hotfix/
Patch
http://www.securityfocus.com/bid/15494
http://www.vupen.com/english/advisories/2005/2484
http://secunia.com/advisories/17633
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-59/advisory/
Patch
Vendor Advisory
http://securitytracker.com/id?1015239
http://www.mailenable.com/hotfix/
Patch
http://www.securityfocus.com/bid/15494
http://www.vupen.com/english/advisories/2005/2484

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*

Версия до 1.6 (включая)

EPSS

Процентиль: 88%

0.04056

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-3whq-vc2m-hq82

github

почти 4 года назад