Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.01031
Percentile: 0.76394

CVSS Scoring

Affected Products

• cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*
• cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*
• cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*
• cpe:2.3:a:merak:mail_server:7.4.5:*:*:*:*:*:*:*

← Back to Home