CVE

Id
10098  
CVE No.
CVE-2004-1670  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html.  
Phase
Assigned (20050221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
69327 10098 CVE-2004-1670 BUGTRAQ:20040910 Multiple vulnerabilities in Icewarp Web Mail 5.2.7  View
69328 10098 CVE-2004-1670 URL:http://marc.info/?l=bugtraq&m=109483971420067&w=2  View
69329 10098 CVE-2004-1670 BID:11371  View
69330 10098 CVE-2004-1670 URL:http://www.securityfocus.com/bid/11371  View
69331 10098 CVE-2004-1670 SECUNIA:12789  View
69332 10098 CVE-2004-1670 URL:http://secunia.com/advisories/12789  View
69333 10098 CVE-2004-1670 XF:merak-icewarp-create-directory(17314)  View

Related JVN