Macallan Mail Solution IMAP Commands Directory Traversal Vulnerability
BID:16704
Info
Macallan Mail Solution IMAP Commands Directory Traversal Vulnerability
| Bugtraq ID: | 16704 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 17 2006 12:00AM |
| Updated: | Feb 17 2006 06:47PM |
| Credit: | Discovered by Secunia Research. |
| Vulnerable: |
Macallan Mail Solution Macallan Mail Solution 4.8.3 .025 |
| Not Vulnerable: |
Macallan Mail Solution Macallan Mail Solution 4.8.5 .004 |
Discussion
Macallan Mail Solution IMAP Commands Directory Traversal Vulnerability
Macallan Mail Solution is prone to a directory-traversal vulnerability exposed through IMAP commands. Successful exploitation could allow a remote attacker to view files, rename directories, and delete empty directories.
Macallan Mail Solution 4.8.03.025 is vulnerable; earlier versions may also be affected.
Macallan Mail Solution is prone to a directory-traversal vulnerability exposed through IMAP commands. Successful exploitation could allow a remote attacker to view files, rename directories, and delete empty directories.
Macallan Mail Solution 4.8.03.025 is vulnerable; earlier versions may also be affected.
Exploit / POC
Macallan Mail Solution IMAP Commands Directory Traversal Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Macallan Mail Solution IMAP Commands Directory Traversal Vulnerability
Solution:
A fix is available:
Macallan Mail Solution Macallan Mail Solution 4.8.3 .025
Solution:
A fix is available:
Macallan Mail Solution Macallan Mail Solution 4.8.3 .025
-
Macallan Mail Solution Macallan Mail Solution 4.8.05.004
http://macallan.club.fr/SETUP/MMSSetup.msi
References
Macallan Mail Solution IMAP Commands Directory Traversal Vulnerability
References:
References:
- Macallan Mail Solution Homepage (Macallan Mail Solution)
- Macallan Mail Solution IMAP Commands Directory Traversal (Secunia Research)