CVE

Id
18412  
CVE No.
CVE-2006-2308  
Status
Candidate  
Description
Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user"s email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY or (6) APPEND commands.  
Phase
Assigned (20060511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
159751 18412 CVE-2006-2308 BUGTRAQ:20060531 Secunia Research: Eserv/3 IMAP and HTTP Server MultipleVulnerabilities  View
159752 18412 CVE-2006-2308 URL:http://www.securityfocus.com/archive/1/archive/1/435415/100/0/threaded  View
159753 18412 CVE-2006-2308 MISC:http://secunia.com/secunia_research/2006-37/advisory/  View
159754 18412 CVE-2006-2308 CONFIRM:http://www.eserv.ru/ru/news/news_detail.php?ID=235  View
159755 18412 CVE-2006-2308 BID:18179  View
159756 18412 CVE-2006-2308 URL:http://www.securityfocus.com/bid/18179  View
159757 18412 CVE-2006-2308 VUPEN:ADV-2006-2066  View
159758 18412 CVE-2006-2308 URL:http://www.vupen.com/english/advisories/2006/2066  View
159759 18412 CVE-2006-2308 SECUNIA:20059  View
159760 18412 CVE-2006-2308 URL:http://secunia.com/advisories/20059  View
159761 18412 CVE-2006-2308 SREASON:1006  View
159762 18412 CVE-2006-2308 URL:http://securityreason.com/securityalert/1006  View
159763 18412 CVE-2006-2308 XF:eserv-imap-directory-traversal(26738)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61517 JVNDB-2006-003783 Windows 用 BlueDragon Server および Server JX におけるサービス運用妨害 (DoS) の脆弱性 Windows 用 BlueDragon Server および Server JX には、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2006-2310 18412 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003783.html  View