Описание
Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive.
Ссылки
- Vendor Advisory
- Patch
- PatchVendor Advisory
- Vendor Advisory
- Patch
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:marshal:mailmarshal_smtp:5.0:*:*:*:*:*:*:*
cpe:2.3:a:marshal:mailmarshal_smtp:6.0:*:*:*:*:*:*:*
cpe:2.3:a:marshal:mailmarshal_smtp:2006:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01728
Низкий
10 Critical
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
почти 4 года назад
Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive.
EPSS
Процентиль: 82%
0.01728
Низкий
10 Critical
CVSS2
Дефекты
CWE-22