Vulnerability Description
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gecad | Axigen Mail Server | <= 7.4.1 |
| Microsoft | Windows | All versions |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.org/1009-exploits/axigen741-traversal.txtExploit
- http://secunia.com/advisories/41430Vendor Advisory
- http://www.acunetix.com/blog/news/directory-traversal-axigen/
- http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.htmlPatchVendor Advisory
- http://www.osvdb.org/68027
- http://www.securityfocus.com/bid/43230Exploit
- http://www.vupen.com/english/advisories/2010/2415PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61826
- http://packetstormsecurity.org/1009-exploits/axigen741-traversal.txtExploit
- http://secunia.com/advisories/41430Vendor Advisory
- http://www.acunetix.com/blog/news/directory-traversal-axigen/
- http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.htmlPatchVendor Advisory
- http://www.osvdb.org/68027
- http://www.securityfocus.com/bid/43230Exploit
- http://www.vupen.com/english/advisories/2010/2415PatchVendor Advisory
FAQ
What is CVE-2010-3460?
CVE-2010-3460 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
How severe is CVE-2010-3460?
CVE-2010-3460 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-3460?
Check the references section above for vendor advisories and patch information. Affected products include: Gecad Axigen Mail Server, Microsoft Windows.