{"api_version":"1","generated_at":"2026-07-23T09:31:53+00:00","cve":"CVE-2005-0332","urls":{"html":"https://cve.report/CVE-2005-0332","api":"https://cve.report/api/cve/CVE-2005-0332.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-0332","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-0332"},"summary":{"title":"CVE-2005-0332","description":"Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-05-02 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/14116","name":"http://secunia.com/advisories/14116","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Secunia - Advisories - DeskNow Mail and Collaboration Directory Traversal Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1013060","name":"http://securitytracker.com/id?1013060","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - DeskNow Mail and Collaboration Server Directory Traversal Flaw Lets Remote Authenticated Users Upload and Delete Arbitrary Files","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=110737616324614&w=2","name":"http://marc.info/?l=bugtraq&m=110737616324614&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19206","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19206","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/12421","name":"http://www.securityfocus.com/bid/12421","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Ventia DeskNow Mail And Collaboration Server Multiple Remote Directory Traversal Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19211","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19211","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19212","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19212","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.security.org.sg/vuln/desknow2512.html","name":"http://www.security.org.sg/vuln/desknow2512.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"SIG^2 G-TEC - DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0332","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0332","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"332","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ventia","cpe5":"desknow_mail_and_collaboration_server","cpe6":"2.5.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"332","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ventia","cpe5":"desknow_mail_and_collaboration_server","cpe6":"2.5.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:13:53.107Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"desknow-attachmentkey-file-upload(19206)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19206"},{"name":"20050202 [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=110737616324614&w=2"},{"name":"1013060","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1013060"},{"name":"12421","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/12421"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.security.org.sg/vuln/desknow2512.html"},{"name":"desknow-filedo-file-deletion(19212)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19212"},{"name":"14116","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/14116"},{"name":"desknow-jsp-gain-access(19211)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19211"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-02-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"desknow-attachmentkey-file-upload(19206)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19206"},{"name":"20050202 [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=110737616324614&w=2"},{"name":"1013060","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1013060"},{"name":"12421","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/12421"},{"tags":["x_refsource_MISC"],"url":"http://www.security.org.sg/vuln/desknow2512.html"},{"name":"desknow-filedo-file-deletion(19212)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19212"},{"name":"14116","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/14116"},{"name":"desknow-jsp-gain-access(19211)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19211"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-0332","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"desknow-attachmentkey-file-upload(19206)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19206"},{"name":"20050202 [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=110737616324614&w=2"},{"name":"1013060","refsource":"SECTRACK","url":"http://securitytracker.com/id?1013060"},{"name":"12421","refsource":"BID","url":"http://www.securityfocus.com/bid/12421"},{"name":"http://www.security.org.sg/vuln/desknow2512.html","refsource":"MISC","url":"http://www.security.org.sg/vuln/desknow2512.html"},{"name":"desknow-filedo-file-deletion(19212)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19212"},{"name":"14116","refsource":"SECUNIA","url":"http://secunia.com/advisories/14116"},{"name":"desknow-jsp-gain-access(19211)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19211"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-0332","datePublished":"2005-02-10T05:00:00.000Z","dateReserved":"2005-02-10T00:00:00.000Z","dateUpdated":"2024-08-07T21:13:53.107Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-05-02 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ventia:desknow_mail_and_collaboration_server:2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"B6044CCF-674D-4CDE-A3A7-70BA29874388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ventia:desknow_mail_and_collaboration_server:2.5.13:*:*:*:*:*:*:*","matchCriteriaId":"BD49EE81-7F8D-479C-BA45-744AE850D81E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"332","Ordinal":"1","Title":"CVE-2005-0332","CVE":"CVE-2005-0332","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"332","Ordinal":"1","NoteData":"Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do.","Type":"Description","Title":"CVE-2005-0332"},{"CveYear":"2005","CveId":"332","Ordinal":"2","NoteData":"2005-02-10","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"332","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}