CVE-2006-0930

CVE-2006-0930

EPSS 1.4%

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the UIDL parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/18990 http://securityreason.com/securityalert/487 http://www.nsag.ru/vuln/877.html http://www.vupen.com/english/advisories/2006/0733