CVE-2006-2308

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

02/06/2006

Last modified:

03/04/2025

Description

Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user&#39;s email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY or (6) APPEND commands.

Impact

Vector 2.0

AV:N/AC:L/Au:S/C:P/I:P/A:N CVSS v2.0 Severity and Metrics:

Base Score: 5.50 MEDIUM
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): Single
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): None