Unscored CVE-2005-1283 EUVD-2005-1286GHSA-jhfx-cwwp-89fx

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary fil…

Published Apr 26, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.

References

argosoft-mail-server-dir-traversal(20229) vdb-entry
20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6 mailing-list
argosoft-mail-server-eml-files-dir-traversal(20226) vdb-entry
15823 vdb-entry
15821 vdb-entry