Unscored CVE-2006-4258 EUVD-2006-4246GHSA-84vc-qqvx-mcc7

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP) allows remote authenticated users to read arb…

Published Aug 21, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP) allows remote authenticated users to read arbitrary files via (1) C:\ (Windows drive letter), (2) UNC, and possibly other types of paths in the file parameter.

References

19545 vdb-entry
20060816 ASSP get?file Traversal Vulnerability mailing-list
21523 third-party-advisory
assp-getfile-url-file-access(28392) vdb-entry
ADV-2006-3289 vdb-entry