CVE-2008-5991: Path Traversal
Published Jan 28, 2009
·Updated
Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the doc parameter.
Affected Software
18 affected components
mailscanner mailscanner
MailWatch MailWatch<=1.0.4
MailWatch MailWatch=0.3-beta
MailWatch MailWatch=0.4
MailWatch MailWatch=0.5
MailWatch MailWatch=0.5.1
MailWatch MailWatch=1.0
MailWatch MailWatch=1.0.2
MailWatch MailWatch=1.0.3
All of the following
mailscanner mailscanner
Any of the following
MailWatch MailWatch<=1.0.4
MailWatch MailWatch=0.3-beta
MailWatch MailWatch=0.4
MailWatch MailWatch=0.5
MailWatch MailWatch=0.5.1
MailWatch MailWatch=1.0
MailWatch MailWatch=1.0.2
MailWatch MailWatch=1.0.3
Event History
Jan 28, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
03:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·03:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5991?
CVE-2008-5991 is classified as a medium-severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2008-5991?
To fix CVE-2008-5991, you should upgrade MailWatch to version 1.0.5 or later.
3
What versions of MailWatch are affected by CVE-2008-5991?
CVE-2008-5991 affects MailWatch for MailScanner versions 1.0.4 and earlier, including versions 0.3-beta through 1.0.3.
4
What type of vulnerability is CVE-2008-5991?
CVE-2008-5991 is a directory traversal vulnerability that allows attackers to include arbitrary local files.
5
Can CVE-2008-5991 be exploited remotely?
Yes, CVE-2008-5991 can be exploited remotely through malicious input in the doc parameter.