Description
Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the (1) create or (2) rename commands.
References
- 17633 third-party-advisory
- ADV-2005-2484 vdb-entry
- 15494 vdb-entry
- http://secunia.com/secunia_research/2005-59/advisory/
- http://www.mailenable.com/hotfix/
- 1015239 vdb-entry