CVE-2006-2917 | BDVDB-2026-17980 Detail

Description#

Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY, (6) APPEND, and (7) LIST commands.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/secunia_research/2006-48/advisory/
http://www.wingate.com/download.php
http://www.securityfocus.com/bid/18908
http://secunia.com/advisories/20707
http://www.vupen.com/english/advisories/2006/2730

Exploit#

No public exploit known

History#

Version 12006-07-10Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.