{"api_version":"1","generated_at":"2026-07-23T10:23:39+00:00","cve":"CVE-2006-5487","urls":{"html":"https://cve.report/CVE-2006-5487","api":"https://cve.report/api/cve/CVE-2006-5487.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-5487","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5487"},"summary":{"title":"CVE-2006-5487","description":"Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via \"..\" sequences in filenames in an ARJ compressed archive.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-11-10 22:07:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/4457","name":"http://www.vupen.com/english/advisories/2006/4457","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1857","name":"http://securityreason.com/securityalert/1857","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CXSecurity - IDS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20999","name":"http://www.securityfocus.com/bid/20999","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Marshal MailMarshal UNARJ Extraction Remote Directory Traversal Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/22806","name":"http://secunia.com/advisories/22806","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Marshal MailMarshal ARJ Archive Directory Traversal - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1017209","name":"http://securitytracker.com/id?1017209","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"MailMarshal Directory Traversal Bug on Processing ARJ Archives Lets Remote Users Create Arbitrary Files on the Target System - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.marshal.com/kb/article.aspx?id=11450","name":"http://www.marshal.com/kb/article.aspx?id=11450","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"MailMarshal Vulnerability to ARJ Directory Traversal Attacks (ADV-2006-4457, ARJ, CVE-2006-5487, traversal, unarj, vulnerability, ZDI-CAN-003)","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-039.html","name":"http://www.zerodayinitiative.com/advisories/ZDI-06-039.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"ZDI-06-039","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/451143/100/0/threaded","name":"http://www.securityfocus.com/archive/1/451143/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30188","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30188","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-5487","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5487","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"5487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"marshal","cpe5":"mailmarshal_smtp","cpe6":"2006","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"marshal","cpe5":"mailmarshal_smtp","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"marshal","cpe5":"mailmarshal_smtp","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T19:55:52.612Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1857","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/1857"},{"name":"mailmarshal-arj-code-execution(30188)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30188"},{"name":"22806","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22806"},{"name":"20999","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/20999"},{"name":"1017209","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1017209"},{"name":"20061110 ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/451143/100/0/threaded"},{"name":"ADV-2006-4457","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/4457"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.marshal.com/kb/article.aspx?id=11450"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-039.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-11-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via \"..\" sequences in filenames in an ARJ compressed archive."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1857","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/1857"},{"name":"mailmarshal-arj-code-execution(30188)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30188"},{"name":"22806","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22806"},{"name":"20999","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/20999"},{"name":"1017209","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1017209"},{"name":"20061110 ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/451143/100/0/threaded"},{"name":"ADV-2006-4457","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/4457"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.marshal.com/kb/article.aspx?id=11450"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-039.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5487","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via \"..\" sequences in filenames in an ARJ compressed archive."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1857","refsource":"SREASON","url":"http://securityreason.com/securityalert/1857"},{"name":"mailmarshal-arj-code-execution(30188)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30188"},{"name":"22806","refsource":"SECUNIA","url":"http://secunia.com/advisories/22806"},{"name":"20999","refsource":"BID","url":"http://www.securityfocus.com/bid/20999"},{"name":"1017209","refsource":"SECTRACK","url":"http://securitytracker.com/id?1017209"},{"name":"20061110 ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/451143/100/0/threaded"},{"name":"ADV-2006-4457","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/4457"},{"name":"http://www.marshal.com/kb/article.aspx?id=11450","refsource":"CONFIRM","url":"http://www.marshal.com/kb/article.aspx?id=11450"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-06-039.html","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-06-039.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-5487","datePublished":"2006-11-10T22:00:00.000Z","dateReserved":"2006-10-24T00:00:00.000Z","dateUpdated":"2024-08-07T19:55:52.612Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-11-10 22:07:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marshal:mailmarshal_smtp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4C5F02CC-0C1D-462E-876C-0B86E019E12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:marshal:mailmarshal_smtp:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6925EFB9-B288-4FA3-A742-F90BBE3D324A"},{"vulnerable":true,"criteria":"cpe:2.3:a:marshal:mailmarshal_smtp:2006:*:*:*:*:*:*:*","matchCriteriaId":"9D44EC3A-884F-404C-874D-3D7BAE1778AA"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"5487","Ordinal":"1","Title":"CVE-2006-5487","CVE":"CVE-2006-5487","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"5487","Ordinal":"1","NoteData":"Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via \"..\" sequences in filenames in an ARJ compressed archive.","Type":"Description","Title":"CVE-2006-5487"},{"CveYear":"2006","CveId":"5487","Ordinal":"2","NoteData":"2006-11-10","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"5487","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}