Lucene search

[email protected]CVE-2006-5487

HistoryNov 10, 2006 - 10:07 p.m.

CVE-2006-5487

2006-11-1022:07:00

CWE-22

[email protected]

web.nvd.nist.gov

cve

2006

5487

mailmarshal

directory traversal

vulnerability

arj

compressed archive

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.025 Low

EPSS

Percentile

89.9%

JSON

Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via “…” sequences in filenames in an ARJ compressed archive.

CPENameOperatorVersion
marshal:mailmarshal_smtpmarshal mailmarshal smtpeq2006
marshal:mailmarshal_smtpmarshal mailmarshal smtpeq6.0
marshal:mailmarshal_smtpmarshal mailmarshal smtpeq5.0

CPE	Name	Operator	Version
marshal:mailmarshal_smtp	marshal mailmarshal smtp	eq	2006
marshal:mailmarshal_smtp	marshal mailmarshal smtp	eq	6.0
marshal:mailmarshal_smtp	marshal mailmarshal smtp	eq	5.0

References

secunia.com/advisories/22806

securityreason.com/securityalert/1857

securitytracker.com/id?1017209

www.marshal.com/kb/article.aspx?id=11450

www.securityfocus.com/archive/1/451143/100/0/threaded

www.securityfocus.com/bid/20999

www.vupen.com/english/advisories/2006/4457

www.zerodayinitiative.com/advisories/ZDI-06-039.html

exchange.xforce.ibmcloud.com/vulnerabilities/30188

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.025 Low

EPSS

Percentile

89.9%

JSON

Related for CVE-2006-5487

securityvulns1 zdi1