Unscored CVE-2006-0127 EUVD-2006-0135GHSA-2869-r8x6-9882

Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the…

Published Jan 9, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other users via a .. (dot dot) in the RENAME command.

References

20060104 Rockliffe Directory Transversal Vulnerability mailing-list
22229 vdb-entry
ADV-2006-0055 vdb-entry
20060105 Re: Rockliffe Directory Transversal Vulnerability mailing-list
18318 third-party-advisory
http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt