exploitDog

CVE-2006-2308

Опубликовано: 02 июн. 2006

Источник: nvd

CVSS2: 5.5

EPSS Низкий

Описание

Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY or (6) APPEND commands.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:etype:eserv:3.0:*:*:*:*:*:*:*

cpe:2.3:a:etype:eserv:3.25:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.0223

Низкий

5.5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-v587-2jq8-8f3x

github

почти 4 года назад

Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY or (6) APPEND commands.

EPSS

Процентиль: 84%

0.0223

Низкий

5.5 Medium

CVSS2

Дефекты

NVD-CWE-Other