CVE-2005-1283

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-04-22

Last modified

2024-08-07

Affected products

• Argosoft Mail Server (Argosoft)

References

• http://marc.info/?l=bugtraq&m=111419001527077&w=2
• http://www.osvdb.org/15821
• http://www.osvdb.org/15823
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20226
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20229