CVE

Id
11538  
CVE No.
CVE-2005-0332  
Status
Candidate  
Description
Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do.  
Phase
Assigned (20050210)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
82433 11538 CVE-2005-0332 BUGTRAQ:20050202 [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities  View
82434 11538 CVE-2005-0332 URL:http://marc.info/?l=bugtraq&m=110737616324614&w=2  View
82435 11538 CVE-2005-0332 MISC:http://www.security.org.sg/vuln/desknow2512.html  View
82436 11538 CVE-2005-0332 BID:12421  View
82437 11538 CVE-2005-0332 URL:http://www.securityfocus.com/bid/12421  View
82438 11538 CVE-2005-0332 SECTRACK:1013060  View
82439 11538 CVE-2005-0332 URL:http://securitytracker.com/id?1013060  View
82440 11538 CVE-2005-0332 SECUNIA:14116  View
82441 11538 CVE-2005-0332 URL:http://secunia.com/advisories/14116  View
82442 11538 CVE-2005-0332 XF:desknow-attachmentkey-file-upload(19206)  View
82443 11538 CVE-2005-0332 URL:http://xforce.iss.net/xforce/xfdb/19206  View
82444 11538 CVE-2005-0332 XF:desknow-jsp-gain-access(19211)  View
82445 11538 CVE-2005-0332 URL:http://xforce.iss.net/xforce/xfdb/19211  View
82446 11538 CVE-2005-0332 XF:desknow-filedo-file-deletion(19212)  View

Related JVN