CVE-2006-0817

Published: Jul 21, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the (1) language parameter in accounts/inc/include.php and (2) lang_settings parameter in admin/inc/include.php, which is not properly sanitized by the securepath function, a related issue to CVE-2005-4556.

Affected (3)

Products: Deerfield: Visnetic Mail Server · Icewarp: Web Mail · Merak: Mail Server

1 product

Visnetic Mail Server

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Deerfield Visnetic Mail Server	Version 8.3.5
Icewarp Web Mail	Version 5.6.0
Merak Mail Server	Version 8.3.8r

References (28)

http://secunia.com/advisories/18953

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://secunia.com/advisories/18966

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://secunia.com/secunia_research/2006-12/advisory/

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/secunia_research/2006-14/advisory/

Source: cve@mitre.org

ExploitVendor Advisory

http://securitytracker.com/id?1016513

Source: cve@mitre.org

http://securitytracker.com/id?1016514

Source: cve@mitre.org

http://www.osvdb.org/27328

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440297/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440302/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19002

Source: cve@mitre.org

ExploitPatch

http://www.securityfocus.com/bid/19007

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2825

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2826

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27773

Source: cve@mitre.org

http://secunia.com/advisories/18953

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://secunia.com/advisories/18966

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://secunia.com/secunia_research/2006-12/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://secunia.com/secunia_research/2006-14/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://securitytracker.com/id?1016513

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016514

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27328

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/440297/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/440302/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19002

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.securityfocus.com/bid/19007

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2825

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2826

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27773

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.