CVE Daily

CVE-2006-5487

Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006...

Critical CVSS 10.0

Overview

Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive.

CWE: CWE-22 Published: 2006-11-10T22:07:00.000
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 10.0 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags