medium4.0
CVE-2006-0127
Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other us…
Impact
Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other users via a .. (dot dot) in the RENAME command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockliffe | Mailsite | through 6.1.22.0 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041039.html
- http://secunia.com/advisories/18318
- http://www.osvdb.org/22229
- http://www.vupen.com/english/advisories/2006/0055
- http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041039.html
- http://secunia.com/advisories/18318
- http://www.osvdb.org/22229
- http://www.vupen.com/english/advisories/2006/0055
- http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt