Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Misc. --> Category: destructive_attack

WinGate IMAP Server Directory Traversal Vulnerabilities Vulnerability Scan

Vulnerability Scan Summary
Tries to create a directory in WinGate's main directory

Detailed Explanation for this Vulnerability Test

Synopsis :

The remote IMAP server is prone to multiple directory traversal

Description :

The remote host appears to be running WinGate, a Windows application
for managing and securing Internet access.

The version of WinGate installed on the remote host fails to remove
directory traversal sequences from the 'CREATE', 'SELECT', 'DELETE',
'RENAME', 'COPY', 'APPEND', and 'LIST' commands before using them to
access messages. An authenticated attacker may be able to exploit
this issue to read mail belong to other users and to create / rename /
delete arbitrary directories on the affected system.

See also :

Solution :

Upgrade to WinGate 6.1.4 Build 1099 or later.

Threat Level:

Low / CVSS Base Score : 2.8

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.