Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2005-02-10T05:00:00
Updated: 2024-08-07T21:05:25.553Z
Reserved: 2005-02-10T00:00:00
Link: CVE-2005-0313

No data.

Status : Modified
Published: 2005-01-27T05:00:00.000
Modified: 2024-11-20T23:54:52.067
Link: CVE-2005-0313

No data.