CVE-2004-1670 - Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .

Back Back to CVE browser

HIGH

Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .

Published Feb 20, 2005

7.5

HIGH

CVSS 2.0

EPSS 1.83%

Description

Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://marc.info/?l=bugtraq&m=109483971420067&w=2
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/12789
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/11371
vdb-entryx_refsource_BIDPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1664
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17314
vdb-entryx_refsource_XF

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=109483971420067&w=2		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/12789		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/11371		vdb-entryx_refsource_BIDPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1664		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17314		vdb-entryx_refsource_XF