NVD

Id
66095  
Name
CVE-2005-0332  
Description
Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-02  
Modified Date
2017-07-10  
Seq
2005-0332  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
344283 66095 CVE-2005-0332 20050202 [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities  View
344284 66095 CVE-2005-0332 1013060  View
344285 66095 CVE-2005-0332 http://www.security.org.sg/vuln/desknow2512.html  View
344286 66095 CVE-2005-0332 12421  View
344287 66095 CVE-2005-0332 desknow-attachmentkey-file-upload(19206)  View
344288 66095 CVE-2005-0332 desknow-jsp-gain-access(19211)  View
344289 66095 CVE-2005-0332 desknow-filedo-file-deletion(19212)  View

Related JVN