CVEvulnerability
CVE-2006-5487
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive.
Affected configurations
• marshal mailmarshal smtp 5.0
• marshal mailmarshal smtp 6.0
• marshal mailmarshal smtp 2006
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/22806 Vendor Advisory
- http://securityreason.com/securityalert/1857 securityreason.com
- http://securitytracker.com/id?1017209 securitytracker.com
- http://www.marshal.com/kb/article.aspx?id=11450 Patch
- http://www.securityfocus.com/archive/1/451143/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20999 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4457 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-039.html Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30188 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/22806 Vendor Advisory
- http://securityreason.com/securityalert/1857 securityreason.com
- http://securitytracker.com/id?1017209 securitytracker.com
- http://www.marshal.com/kb/article.aspx?id=11450 Patch
- http://www.securityfocus.com/archive/1/451143/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20999 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4457 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-039.html Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30188 exchange.xforce.ibmcloud.com