CVE-2024-32399

CVE-2024-32399 漏洞概述 RaidenMAILD邮件服务器v4.9.4及之前版本中存在目录遍历漏洞，允许远程攻击者通过/webeditor/组件获取敏感信息。 漏洞类型 目录遍历 厂商 RaidenMAILD邮件服务器 受影响版本 RaidenMAILD邮件服务器 = 4.9.4 漏洞利用验证（PoC） 请求： GET /webeditor/../../../windows/win.ini HTTP/1.1 Host: 127.0.0.1:81 Cache-Control: max-age=0 Connection: close 响应： HTTP/1.1 200 OK...

CVE-2024-32399

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component...

RaidenMAILD Mail Server 安全漏洞

RaidenMAILD Mail Server is an easy-to-use SMTP/POP3/IMAP4/WebMail mail server from RaidenMAILD. A security vulnerability exists in RaidenMAILD Mail Server v.4.9.4 and earlier versions, which stems from a directory traversal vulnerability. The vulnerability can be exploited to obtain sensitive...

PT-2024-24547 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: RaidenMAILD Mail Server versions 4.9.4 and before Description: The issue allows a remote attacker to obtain sensitive information via the "/webeditor/" component. This is a Directory Traversal vulnerability, which can be exploited to access...

CVE-2024-32399: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component...

CVE-2024-32399

A Directory Traversal vulnerability exists in RaidenMAILD Mail Server version 4.9.4 and before . The flaw is located in the /webeditor/ component, allowing a remote attacker to traverse directories to access and obtain sensitive information from the mail server. Practical proof-of-concept example...