Vulnerability Details CVE-2005-1283
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.019
EPSS Ranking 82.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=111419001527077&w=2
- http://www.osvdb.org/15821
- http://www.osvdb.org/15823
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20229
- http://marc.info/?l=bugtraq&m=111419001527077&w=2
- http://www.osvdb.org/15821
- http://www.osvdb.org/15823
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20229
Products affected by CVE-2005-1283
-
cpe:2.3:a:argosoft:argosoft_mail_server:1.8.7.6