CVE-2005-1283 Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or mo...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| argosoft mail server | = 1.8.7.6 | No fix listed |
References
- 20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6 mailing-list
- 15821 vdb-entry
- 15823 vdb-entry
- argosoft-mail-server-eml-files-dir-traversal(20226) vdb-entry
- argosoft-mail-server-dir-traversal(20229) vdb-entry