{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-11-10T00:00:00", "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via \"..\" sequences in filenames in an ARJ compressed archive."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1857", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1857"}, {"name": "mailmarshal-arj-code-execution(30188)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30188"}, {"name": "22806", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22806"}, {"name": "20999", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/20999"}, {"name": "1017209", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017209"}, {"name": "20061110 ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/451143/100/0/threaded"}, {"name": "ADV-2006-4457", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/4457"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.marshal.com/kb/article.aspx?id=11450"}, {"tags": ["x_refsource_MISC"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-039.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-5487", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via \"..\" sequences in filenames in an ARJ compressed archive."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1857", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1857"}, {"name": "mailmarshal-arj-code-execution(30188)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30188"}, {"name": "22806", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22806"}, {"name": "20999", "refsource": "BID", "url": "http://www.securityfocus.com/bid/20999"}, {"name": "1017209", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017209"}, {"name": "20061110 ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/451143/100/0/threaded"}, {"name": "ADV-2006-4457", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/4457"}, {"name": "http://www.marshal.com/kb/article.aspx?id=11450", "refsource": "CONFIRM", "url": "http://www.marshal.com/kb/article.aspx?id=11450"}, {"name": "http://www.zerodayinitiative.com/advisories/ZDI-06-039.html", "refsource": "MISC", "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-039.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T19:55:52.612Z"}, "title": "CVE Program Container", "references": [{"name": "1857", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1857"}, {"name": "mailmarshal-arj-code-execution(30188)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30188"}, {"name": "22806", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22806"}, {"name": "20999", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/20999"}, {"name": "1017209", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017209"}, {"name": "20061110 ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/451143/100/0/threaded"}, {"name": "ADV-2006-4457", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/4457"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.marshal.com/kb/article.aspx?id=11450"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-039.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-5487", "datePublished": "2006-11-10T22:00:00", "dateReserved": "2006-10-24T00:00:00", "dateUpdated": "2024-08-07T19:55:52.612Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:marshal:mailmarshal_smtp:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "4C5F02CC-0C1D-462E-876C-0B86E019E12A", "vulnerable": true}, {"criteria": "cpe:2.3:a:marshal:mailmarshal_smtp:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "6925EFB9-B288-4FA3-A742-F90BBE3D324A", "vulnerable": true}, {"criteria": "cpe:2.3:a:marshal:mailmarshal_smtp:2006:*:*:*:*:*:*:*", "matchCriteriaId": "9D44EC3A-884F-404C-874D-3D7BAE1778AA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via \"..\" sequences in filenames in an ARJ compressed archive."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio en el Marshal MailMarshal SMTP 5.x, 6.x, y 2006, y MailMarshal para Exchange 5.x, permite a atacantes remotos escribir ficheros de su elecci\u00f3n mediante secuencias \"..\" en los nombres de fichero de un archivo comprimido ARJ."}], "id": "CVE-2006-5487", "lastModified": "2018-10-17T21:43:33.690", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-11-10T22:07:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22806"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1857"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017209"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.marshal.com/kb/article.aspx?id=11450"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/451143/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/20999"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/4457"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-039.html"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30188"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}