CVEvulnerability

CVE-2005-3691

5.0 MEDIUM Published 2005-11-19 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-11-19
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the (1) create or (2) rename commands.

References

http://secunia.com/advisories/17633 Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-59/advisory/ Patch, Vendor Advisory
http://securitytracker.com/id?1015239 securitytracker.com
http://www.mailenable.com/hotfix/ Patch
http://www.securityfocus.com/bid/15494 www.securityfocus.com
http://www.vupen.com/english/advisories/2005/2484 www.vupen.com
http://secunia.com/advisories/17633 Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-59/advisory/ Patch, Vendor Advisory
http://securitytracker.com/id?1015239 securitytracker.com
http://www.mailenable.com/hotfix/ Patch
http://www.securityfocus.com/bid/15494 www.securityfocus.com
http://www.vupen.com/english/advisories/2005/2484 www.vupen.com