packetstormsecurity.org
http://packetstormsecurity.org/1009-exploits/axigen741-traversal.txt CVE-2010-3460
Axigen Webmail 1.0.1 - Directory Traversal
Record summary
CVE-2010-3460 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAxigen Webmail 1.0.1 - Directory TraversalExploitDB exploitby Bogdan CalinNot analyzed1 file
References
941430Third-party advisory
http://secunia.com/advisories/41430 acunetix.com
http://www.acunetix.com/blog/news/directory-traversal-axigen axigen.comConfirmation
http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.html 68027vdb entry
http://www.osvdb.org/68027 43230vdb entry
http://www.securityfocus.com/bid/43230 ADV-2010-2415vdb entry
http://www.vupen.com/english/advisories/2010/2415 axigenmailserver-httpserver-dir-traversal(61826)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/61826 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-3460