Open-Xchange Server CVE-2013-1645 Directory Traversal Vulnerability

Bugtraq ID:	58466
Class:	Input Validation Error
CVE:	CVE-2013-1645
Remote:	Yes
Local:	No
Published:	Mar 13 2013 12:00AM
Updated:	Mar 19 2015 08:44AM
Credit:	Vendor reported this issue.
Vulnerable:
Not Vulnerable:

Open-Xchange Server CVE-2013-1645 Directory Traversal Vulnerability

Open-Xchange Server is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

A remote attacker can use directory-traversal strings to retrieve local arbitrary files in the context of the affected application.

Versions prior to Open-Xchange Server 6.22.1-rev14 are vulnerable.

Open-Xchange Server CVE-2013-1645 Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Open-Xchange Server CVE-2013-1645 Directory Traversal Vulnerability

References:

• Open-Xchange Homepage (Open-Xchange AG)
  
• Open-Xchange Security Advisory 2013-03-13 (Open-Xchange AG)
  
• Release Notes Public Patch Release #1310 (Open-Xchange AG)
  
• Release Notes Public Patch Release #1311 (Open-Xchange AG)
  
• Release Notes Public Patch Release #1312 (Open-Xchange AG)