CVE-2006-0818

{"id": "CVE-2006-0818", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-21T14:03:00.000", "references": [{"url": "http://secunia.com/advisories/18953", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/18966", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/secunia_research/2006-12/advisory/", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/secunia_research/2006-14/advisory/", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016513", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016514", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/440297/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/440302/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19002", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19007", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2825", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27780", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname in the lang_settings parameter to mail/index.html, which is not properly sanitized by the validatefolder PHP function, possibly due to an incomplete fix for CVE-2005-4558."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio de ruta absoluta en (1) MERAK Mail Server para Windows 8.3.8r con anteriores IceWarp Web Mail 5.6.1 y (2) VisNetic MailServer anterior a 8.5.0.5 permite a usuarios remotos validados incluir archivos de su elecci\u00f3n a trav\u00e9s del par\u00e1metro language modificado y un nombre de ruta completo Windows o UNC en el par\u00e1metro lang_settings en mail/index.html, lo cual no es saneadoo de forma adecuada por la funci\u00f3n PHP validatefolder, posiblemente debido a una soluci\u00f3n incompleta para CVE-2005-4558."}], "lastModified": "2018-10-18T16:29:13.320", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:deerfield:visnetic_mail_server:8.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA00556D-F5B0-46DA-9A86-B737DC7A8A3D"}, {"criteria": "cpe:2.3:a:icewarp:web_mail:5.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F933D19-3CFD-4DB8-8D4F-80CE3D8B1FBF"}, {"criteria": "cpe:2.3:a:merak:mail_server:8.3.8r:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4CCD574-8BA5-4FF9-928E-D7BC9A0377B1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}