CVE Vulnerabilities

CVE-2000-0780

Published: Oct 20, 2000 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (dot dot) attack.

Affected Software

Name Vendor Start Version End Version
Imail Ipswitch 5.0 5.0
Imail Ipswitch 6.0 6.0
Imail Ipswitch 6.1 6.1
Imail Ipswitch 6.2 6.2
Imail Ipswitch 6.3 6.3
Imail Ipswitch 6.4 6.4

References