NVD

Id
59547  
Name
CVE-2006-0817  
Description
Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the (1) language parameter in accounts/inc/include.php and (2) lang_settings parameter in admin/inc/include.php, which is not properly sanitized by the securepath function, a related issue to CVE-2005-4556.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-21  
Modified Date
2016-08-30  
Seq
2006-0817  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
306275 59547 CVE-2006-0817 1016513  View
306276 59547 CVE-2006-0817 1016514  View
306277 59547 CVE-2006-0817 20060717 Secunia Research: IceWarp Web Mail Two File InclusionVulnerabilities  View
306278 59547 CVE-2006-0817 20060717 Secunia Research: VisNetic Mail Server Two File InclusionVulnerabilities  View
306279 59547 CVE-2006-0817 19002  View
306280 59547 CVE-2006-0817 19007  View
306281 59547 CVE-2006-0817 ADV-2006-2825  View
306282 59547 CVE-2006-0817 ADV-2006-2826  View
306283 59547 CVE-2006-0817 visnetic-include-file-include(27773)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60451 JVNDB-2006-002717 MERAK Mail Server および VisNetic MailServer における絶対パスディレクトリトラバーサルの脆弱性 (a) IceWarp Web Mail 以前の Windows 用 MERAK Mail Server および (b) VisNetic MailServer は、securepath 関数が適切にサニタイズしないため、絶対パスディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-0817 16919 CVE-2006-0817 59547 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002717.html 2006-07-21 2012-12-20 View