CVE-2005-0845: Medium severity netwin surgemail vulnerability
Published Mar 24, 2005
·Updated
Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. (dot dot) in the attachid parameter.
Affected Software
2 affected components
Netwin Surgemail=2.2g3
Netwin Surgemail=2.2g3
Remediation
Patch Available
Event History
Mar 24, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0845?
CVE-2005-0845 is considered to be of high severity due to the potential for unauthorized file system access.
2
How do I fix CVE-2005-0845?
To mitigate CVE-2005-0845, upgrade to a patched version of SurgeMail that addresses this directory traversal vulnerability.
3
Who is affected by CVE-2005-0845?
CVE-2005-0845 affects remote authenticated users of SurgeMail version 2.2g3.
4
What does CVE-2005-0845 allow attackers to do?
CVE-2005-0845 allows attackers to write arbitrary files or directories to the server using directory traversal techniques.
5
Is CVE-2005-0845 present in newer versions of SurgeMail?
CVE-2005-0845 is specific to SurgeMail version 2.2g3 and does not affect newer versions that have been patched.