CVE-2008-0464 in Aconon Mail Enterprise Sql

Summary

Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 01/25/2008
• Disclosure: 01/25/2008
• Moderation: VulDB entry created
• Entries: VDB-40715 (1)
• CPE: ready
• CWE: CWE-22 (Confirmed)
• Exploit: Download
• CVSS: 5.3
• EPSS: 0.12146
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-0464
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-0464
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-0464/