|
|
Family: Misc. --> Category: destructive_attack
WinGate IMAP Server Directory Traversal Vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
Tries to create a directory in WinGate's main directory
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote IMAP server is prone to multiple directory traversal
vulnerabilities.
Description :
The remote host appears to be running WinGate, a Windows application
for managing and securing Internet access.
The version of WinGate installed on the remote host fails to remove
directory traversal sequences from the 'CREATE', 'SELECT', 'DELETE',
'RENAME', 'COPY', 'APPEND', and 'LIST' commands before using them to
access messages. An authenticated attacker may be able to exploit
this issue to read mail belong to other users and to create / rename /
delete arbitrary directories on the affected system.
See also :
http://secunia.com/secunia_research/2006-48/advisory/
http://forums.qbik.com/viewtopic.php?t=4215
Solution :
Upgrade to WinGate 6.1.4 Build 1099 or later.
Threat Level:
Low / CVSS Base Score : 2.8
(AV:R/AC:L/Au:R/C:P/I:P/A:N/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
