Family: Misc. --> Category: mixed
ArGoSoft Mail Server IMAP Server Directory Traversal Vulnerability Vulnerability Scan
Vulnerability Scan Summary
Checks for directory traversal vulnerability in ArGoSoft IMAP server
Detailed Explanation for this Vulnerability Test
The remote IMAP server is subject to directory traversal attacks.
The remote host is running ArGoSoft Mail Server, a messaging system
The IMAP server bundled with the version of ArGoSoft Mail Server
installed on the remote host fails to filter directory traversal
sequences from mailbox names passed to the 'RENAME' command. An
authenticated attacker can exploit this issue to move mailboxes to any
location on the affected system.
See also :
Upgrade to ArGoSoft Mail Server 220.127.116.11 or later.
Low / CVSS Base Score : 1.4
Click HERE for more information and discussions on this network vulnerability scan.