CVE-2005-0184: Low severity Squirrelmail Vacation plugin vulnerability
Published Feb 6, 2005
·Updated
Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. (dot dot) in a get request.
Affected Software
2 affected components
Squirrelmail Vacation plugin<=0.15
Squirrelmail Vacation plugin<=0.15
Event History
Feb 6, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0184?
CVE-2005-0184 is classified as a medium severity vulnerability due to its ability to permit unauthorized file access.
2
How do I fix CVE-2005-0184?
To fix CVE-2005-0184, upgrade the SquirrelMail Vacation plugin to a version later than 0.15.
3
Who is affected by CVE-2005-0184?
Users of SquirrelMail with the Vacation plugin version 0.15 or earlier are affected by CVE-2005-0184.
4
What actions can local users take regarding CVE-2005-0184?
Local users can exploit CVE-2005-0184 to read arbitrary files by crafting a specific get request using directory traversal techniques.
5
Is CVE-2005-0184 easy to exploit?
Yes, CVE-2005-0184 can be easily exploited by inputting a simple dot dot sequence in the file path.