Lucene search

[email protected]CVE-2010-3460

HistorySep 17, 2010 - 8:00 p.m.

CVE-2010-3460

2010-09-1720:00:00

CWE-22

[email protected]

web.nvd.nist.gov

axigen mail server

directory traversal

vulnerability

http

remote attack

windows

nvd

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.029 Low

EPSS

Percentile

90.7%

JSON

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.

CPENameOperatorVersion
gecad:axigen_mail_servergecad axigen mail serverle7.4.1
gecad:axigen_mail_servergecad axigen mail servereq-
gecad:axigen_mail_servergecad axigen mail servereq1.0.1
gecad:axigen_mail_servergecad axigen mail servereq1.0.2
gecad:axigen_mail_servergecad axigen mail servereq1.0.5
gecad:axigen_mail_servergecad axigen mail servereq1.0.6
gecad:axigen_mail_servergecad axigen mail servereq1.0.7
gecad:axigen_mail_servergecad axigen mail servereq1.1.0
gecad:axigen_mail_servergecad axigen mail servereq1.1.1
gecad:axigen_mail_servergecad axigen mail servereq1.2.0

CPE	Name	Operator	Version
gecad:axigen_mail_server	gecad axigen mail server	le	7.4.1
gecad:axigen_mail_server	gecad axigen mail server	eq	-
gecad:axigen_mail_server	gecad axigen mail server	eq	1.0.1
gecad:axigen_mail_server	gecad axigen mail server	eq	1.0.2
gecad:axigen_mail_server	gecad axigen mail server	eq	1.0.5
gecad:axigen_mail_server	gecad axigen mail server	eq	1.0.6
gecad:axigen_mail_server	gecad axigen mail server	eq	1.0.7
gecad:axigen_mail_server	gecad axigen mail server	eq	1.1.0
gecad:axigen_mail_server	gecad axigen mail server	eq	1.1.1
gecad:axigen_mail_server	gecad axigen mail server	eq	1.2.0

Rows per page:

1-10 of 441

References

packetstormsecurity.org/1009-exploits/axigen741-traversal.txt

secunia.com/advisories/41430

www.acunetix.com/blog/news/directory-traversal-axigen/

www.axigen.com/press/product-releases/axigen-releases-version-742_74.html

www.osvdb.org/68027

www.securityfocus.com/bid/43230

www.vupen.com/english/advisories/2010/2415

exchange.xforce.ibmcloud.com/vulnerabilities/61826

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.029 Low

EPSS

Percentile

90.7%

JSON

Related for CVE-2010-3460

cvelist1 prion1 openvas2