Lucene search

K
cveMitreCVE-2006-0798
HistoryFeb 19, 2006 - 9:02 p.m.

CVE-2006-0798

2006-02-1921:02:00
mitre
web.nvd.nist.gov
27
cve-2006-0798
imap service
directory traversal
macallan mail solution
remote authenticated users
nvd

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

71.9%

Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated users to read e-mails of other users or create, modify, or delete directories via a … (dot dot) in the argument to the (1) CREATE, (2) SELECT, (3) DELETE, or (4) RENAME commands.

Affected configurations

Nvd
Node
macallanmail_solutionRange4.8.03.025
VendorProductVersionCPE
macallanmail_solution*cpe:2.3:a:macallan:mail_solution:*:*:*:*:*:*:*:*

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

71.9%

Related for CVE-2006-0798