CVE-2006-0818 Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated us...
MediumCVSS 4.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname in the lang_settings parameter to mail/index.html, which is not properly sanitized by the validatefolder PHP function, possibly due to an incomplete fix for CVE-2005-4558.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deerfield visnetic mail server | = 8.3.5 | No fix listed |
| icewarp web mail | = 5.6.0 | No fix listed |
| merak mail server | = 8.3.8r | No fix listed |
References
- 18953 exploit patch third-party-advisory vendor-advisory
- 18966 exploit patch third-party-advisory vendor-advisory
- secunia.com exploit patch vendor-advisory
- secunia.com exploit patch vendor-advisory
- 1016513 vdb-entry
- 1016514 vdb-entry
- 20060717 Secunia Research: IceWarp Web Mail Two File InclusionVulnerabilities mailing-list
- 20060717 Secunia Research: VisNetic Mail Server Two File InclusionVulnerabilities mailing-list
- 19002 exploit patch vdb-entry
- 19007 vdb-entry
- ADV-2006-2825 vdb-entry
- visnetic-language-file-include(27780) vdb-entry