Search
Find a vulnerability
Search criteria
6 vulnerabilities by ciphertrust
CVE-2007-1723 (GCVE-0-2007-1723)
Vulnerability from nvd – Published: 2007-03-28 00:00 – Updated: 2024-08-07 13:06
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dns1, or (8) dns2 parameter to (a) admin/system_IronMail.do; the (9) ipAddress parameter to (b) admin/systemOutOfBand.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to (d) admin/systemLicenseManager.do; the (13) rows[1].attrValueStr or (14) rows[2].attrValueStr parameter to (e) admin/systemWebAdminConfig.do; the (15) rows[0].attrValueStr, rows[1].attrValueStr, (16) rows[2].attrValue, or (17) rows[2].attrValueStrClone parameter to (f) admin/ldap_ConfigureServiceProperties.do; the (18) input1 parameter to (g) admin/mailFirewall_MailRoutingInternal.do; or the (19) rows[2].attrValueStr, (20) rows[3].attrValueStr, (21) rows[5].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
15 references
| URL | Tags |
|---|---|
| http://osvdb.org/34528 | vdb-entryx_refsource_OSVDB |
| http://osvdb.org/34531 | vdb-entryx_refsource_OSVDB |
| http://www.securitytracker.com/id?1017821 | vdb-entryx_refsource_SECTRACK |
| http://securityreason.com/securityalert/2484 | third-party-advisoryx_refsource_SREASON |
| http://osvdb.org/34529 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2007/1164 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/463827/100… | mailing-listx_refsource_BUGTRAQ |
| http://osvdb.org/34530 | vdb-entryx_refsource_OSVDB |
| http://osvdb.org/34533 | vdb-entryx_refsource_OSVDB |
| http://www.514.es/2007/03/siaadv07004_multiples_v… | x_refsource_MISC |
| http://secunia.com/advisories/24657 | third-party-advisoryx_refsource_SECUNIA |
| http://osvdb.org/34527 | vdb-entryx_refsource_OSVDB |
| http://osvdb.org/34532 | vdb-entryx_refsource_OSVDB |
| http://osvdb.org/34526 | vdb-entryx_refsource_OSVDB |
Date Public
2007-03-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:06:26.085Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "34528",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34528"
},
{
"name": "34531",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34531"
},
{
"name": "1017821",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1017821"
},
{
"name": "2484",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2484"
},
{
"name": "34529",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34529"
},
{
"name": "ADV-2007-1164",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1164"
},
{
"name": "ironmail-multiple-xss(33232)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33232"
},
{
"name": "20070326 Multiple XSS in IronMail",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/463827/100/0/threaded"
},
{
"name": "34530",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34530"
},
{
"name": "34533",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34533"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html"
},
{
"name": "24657",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24657"
},
{
"name": "34527",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34527"
},
{
"name": "34532",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34532"
},
{
"name": "34526",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34526"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-03-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dns1, or (8) dns2 parameter to (a) admin/system_IronMail.do; the (9) ipAddress parameter to (b) admin/systemOutOfBand.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to (d) admin/systemLicenseManager.do; the (13) rows[1].attrValueStr or (14) rows[2].attrValueStr parameter to (e) admin/systemWebAdminConfig.do; the (15) rows[0].attrValueStr, rows[1].attrValueStr, (16) rows[2].attrValue, or (17) rows[2].attrValueStrClone parameter to (f) admin/ldap_ConfigureServiceProperties.do; the (18) input1 parameter to (g) admin/mailFirewall_MailRoutingInternal.do; or the (19) rows[2].attrValueStr, (20) rows[3].attrValueStr, (21) rows[5].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "34528",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34528"
},
{
"name": "34531",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34531"
},
{
"name": "1017821",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1017821"
},
{
"name": "2484",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2484"
},
{
"name": "34529",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34529"
},
{
"name": "ADV-2007-1164",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1164"
},
{
"name": "ironmail-multiple-xss(33232)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33232"
},
{
"name": "20070326 Multiple XSS in IronMail",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/463827/100/0/threaded"
},
{
"name": "34530",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34530"
},
{
"name": "34533",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34533"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html"
},
{
"name": "24657",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24657"
},
{
"name": "34527",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34527"
},
{
"name": "34532",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34532"
},
{
"name": "34526",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34526"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1723",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dns1, or (8) dns2 parameter to (a) admin/system_IronMail.do; the (9) ipAddress parameter to (b) admin/systemOutOfBand.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to (d) admin/systemLicenseManager.do; the (13) rows[1].attrValueStr or (14) rows[2].attrValueStr parameter to (e) admin/systemWebAdminConfig.do; the (15) rows[0].attrValueStr, rows[1].attrValueStr, (16) rows[2].attrValue, or (17) rows[2].attrValueStrClone parameter to (f) admin/ldap_ConfigureServiceProperties.do; the (18) input1 parameter to (g) admin/mailFirewall_MailRoutingInternal.do; or the (19) rows[2].attrValueStr, (20) rows[3].attrValueStr, (21) rows[5].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "34528",
"refsource": "OSVDB",
"url": "http://osvdb.org/34528"
},
{
"name": "34531",
"refsource": "OSVDB",
"url": "http://osvdb.org/34531"
},
{
"name": "1017821",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1017821"
},
{
"name": "2484",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2484"
},
{
"name": "34529",
"refsource": "OSVDB",
"url": "http://osvdb.org/34529"
},
{
"name": "ADV-2007-1164",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1164"
},
{
"name": "ironmail-multiple-xss(33232)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33232"
},
{
"name": "20070326 Multiple XSS in IronMail",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/463827/100/0/threaded"
},
{
"name": "34530",
"refsource": "OSVDB",
"url": "http://osvdb.org/34530"
},
{
"name": "34533",
"refsource": "OSVDB",
"url": "http://osvdb.org/34533"
},
{
"name": "http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html",
"refsource": "MISC",
"url": "http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html"
},
{
"name": "24657",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24657"
},
{
"name": "34527",
"refsource": "OSVDB",
"url": "http://osvdb.org/34527"
},
{
"name": "34532",
"refsource": "OSVDB",
"url": "http://osvdb.org/34532"
},
{
"name": "34526",
"refsource": "OSVDB",
"url": "http://osvdb.org/34526"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1723",
"datePublished": "2007-03-28T00:00:00.000Z",
"dateReserved": "2007-03-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T13:06:26.085Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-5210 (GCVE-0-2006-5210)
Vulnerability from nvd – Published: 2006-10-16 23:00 – Updated: 2024-08-07 19:41
VLAI
EPSS
VEX
Summary
Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded "../" sequences ("%252e%252e/").
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://supportcenter.ciphertrust.com/vulnerabili… | x_refsource_MISC |
| http://securitytracker.com/id?1017069 | vdb-entryx_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2006/4055 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/20436 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/22406 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/448779/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/1726 | third-party-advisoryx_refsource_SREASON |
| http://www.symantec.com/enterprise/research/SYMSA… | x_refsource_MISC |
Date Public
2006-10-13 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T19:41:05.083Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html"
},
{
"name": "1017069",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017069"
},
{
"name": "ADV-2006-4055",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/4055"
},
{
"name": "20436",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/20436"
},
{
"name": "22406",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/22406"
},
{
"name": "ironwebmail-url-directory-traversal(29620)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29620"
},
{
"name": "20061013 SYMSA-2006-010: Directory Traversal in IronWebMail",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/448779/100/0/threaded"
},
{
"name": "1726",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1726"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-10-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded \"../\" sequences (\"%252e%252e/\")."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html"
},
{
"name": "1017069",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017069"
},
{
"name": "ADV-2006-4055",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/4055"
},
{
"name": "20436",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/20436"
},
{
"name": "22406",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/22406"
},
{
"name": "ironwebmail-url-directory-traversal(29620)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29620"
},
{
"name": "20061013 SYMSA-2006-010: Directory Traversal in IronWebMail",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/448779/100/0/threaded"
},
{
"name": "1726",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1726"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-5210",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded \"../\" sequences (\"%252e%252e/\")."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html",
"refsource": "MISC",
"url": "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html"
},
{
"name": "1017069",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017069"
},
{
"name": "ADV-2006-4055",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4055"
},
{
"name": "20436",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/20436"
},
{
"name": "22406",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/22406"
},
{
"name": "ironwebmail-url-directory-traversal(29620)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29620"
},
{
"name": "20061013 SYMSA-2006-010: Directory Traversal in IronWebMail",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/448779/100/0/threaded"
},
{
"name": "1726",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1726"
},
{
"name": "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt",
"refsource": "MISC",
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-5210",
"datePublished": "2006-10-16T23:00:00.000Z",
"dateReserved": "2006-10-09T00:00:00.000Z",
"dateUpdated": "2024-08-07T19:41:05.083Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0538 (GCVE-0-2006-0538)
Vulnerability from nvd – Published: 2006-02-04 00:00 – Updated: 2024-08-07 16:41
VLAI
EPSS
VEX
Summary
CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/407 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/16465 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1015555 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/423898/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-02-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:41:28.387Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "407",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/407"
},
{
"name": "ironmail-tcpsyn-flood-dos(24445)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24445"
},
{
"name": "16465",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16465"
},
{
"name": "1015555",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015555"
},
{
"name": "20060203 IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/423898/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "CipherTrust IronMail 5.0.1, when \"Denial of Service Protection\" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "407",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/407"
},
{
"name": "ironmail-tcpsyn-flood-dos(24445)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24445"
},
{
"name": "16465",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16465"
},
{
"name": "1015555",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015555"
},
{
"name": "20060203 IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/423898/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0538",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "CipherTrust IronMail 5.0.1, when \"Denial of Service Protection\" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "407",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/407"
},
{
"name": "ironmail-tcpsyn-flood-dos(24445)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24445"
},
{
"name": "16465",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16465"
},
{
"name": "1015555",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015555"
},
{
"name": "20060203 IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/423898/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0538",
"datePublished": "2006-02-04T00:00:00.000Z",
"dateReserved": "2006-02-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:41:28.387Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-1723 (GCVE-0-2007-1723)
Vulnerability from cvelistv5 – Published: 2007-03-28 00:00 – Updated: 2024-08-07 13:06
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dns1, or (8) dns2 parameter to (a) admin/system_IronMail.do; the (9) ipAddress parameter to (b) admin/systemOutOfBand.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to (d) admin/systemLicenseManager.do; the (13) rows[1].attrValueStr or (14) rows[2].attrValueStr parameter to (e) admin/systemWebAdminConfig.do; the (15) rows[0].attrValueStr, rows[1].attrValueStr, (16) rows[2].attrValue, or (17) rows[2].attrValueStrClone parameter to (f) admin/ldap_ConfigureServiceProperties.do; the (18) input1 parameter to (g) admin/mailFirewall_MailRoutingInternal.do; or the (19) rows[2].attrValueStr, (20) rows[3].attrValueStr, (21) rows[5].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
15 references
| URL | Tags |
|---|---|
| http://osvdb.org/34528 | vdb-entryx_refsource_OSVDB |
| http://osvdb.org/34531 | vdb-entryx_refsource_OSVDB |
| http://www.securitytracker.com/id?1017821 | vdb-entryx_refsource_SECTRACK |
| http://securityreason.com/securityalert/2484 | third-party-advisoryx_refsource_SREASON |
| http://osvdb.org/34529 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2007/1164 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/463827/100… | mailing-listx_refsource_BUGTRAQ |
| http://osvdb.org/34530 | vdb-entryx_refsource_OSVDB |
| http://osvdb.org/34533 | vdb-entryx_refsource_OSVDB |
| http://www.514.es/2007/03/siaadv07004_multiples_v… | x_refsource_MISC |
| http://secunia.com/advisories/24657 | third-party-advisoryx_refsource_SECUNIA |
| http://osvdb.org/34527 | vdb-entryx_refsource_OSVDB |
| http://osvdb.org/34532 | vdb-entryx_refsource_OSVDB |
| http://osvdb.org/34526 | vdb-entryx_refsource_OSVDB |
Date Public
2007-03-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:06:26.085Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "34528",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34528"
},
{
"name": "34531",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34531"
},
{
"name": "1017821",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1017821"
},
{
"name": "2484",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2484"
},
{
"name": "34529",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34529"
},
{
"name": "ADV-2007-1164",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1164"
},
{
"name": "ironmail-multiple-xss(33232)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33232"
},
{
"name": "20070326 Multiple XSS in IronMail",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/463827/100/0/threaded"
},
{
"name": "34530",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34530"
},
{
"name": "34533",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34533"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html"
},
{
"name": "24657",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24657"
},
{
"name": "34527",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34527"
},
{
"name": "34532",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34532"
},
{
"name": "34526",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34526"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-03-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dns1, or (8) dns2 parameter to (a) admin/system_IronMail.do; the (9) ipAddress parameter to (b) admin/systemOutOfBand.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to (d) admin/systemLicenseManager.do; the (13) rows[1].attrValueStr or (14) rows[2].attrValueStr parameter to (e) admin/systemWebAdminConfig.do; the (15) rows[0].attrValueStr, rows[1].attrValueStr, (16) rows[2].attrValue, or (17) rows[2].attrValueStrClone parameter to (f) admin/ldap_ConfigureServiceProperties.do; the (18) input1 parameter to (g) admin/mailFirewall_MailRoutingInternal.do; or the (19) rows[2].attrValueStr, (20) rows[3].attrValueStr, (21) rows[5].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "34528",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34528"
},
{
"name": "34531",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34531"
},
{
"name": "1017821",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1017821"
},
{
"name": "2484",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2484"
},
{
"name": "34529",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34529"
},
{
"name": "ADV-2007-1164",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1164"
},
{
"name": "ironmail-multiple-xss(33232)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33232"
},
{
"name": "20070326 Multiple XSS in IronMail",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/463827/100/0/threaded"
},
{
"name": "34530",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34530"
},
{
"name": "34533",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34533"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html"
},
{
"name": "24657",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24657"
},
{
"name": "34527",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34527"
},
{
"name": "34532",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34532"
},
{
"name": "34526",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34526"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1723",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dns1, or (8) dns2 parameter to (a) admin/system_IronMail.do; the (9) ipAddress parameter to (b) admin/systemOutOfBand.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to (d) admin/systemLicenseManager.do; the (13) rows[1].attrValueStr or (14) rows[2].attrValueStr parameter to (e) admin/systemWebAdminConfig.do; the (15) rows[0].attrValueStr, rows[1].attrValueStr, (16) rows[2].attrValue, or (17) rows[2].attrValueStrClone parameter to (f) admin/ldap_ConfigureServiceProperties.do; the (18) input1 parameter to (g) admin/mailFirewall_MailRoutingInternal.do; or the (19) rows[2].attrValueStr, (20) rows[3].attrValueStr, (21) rows[5].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "34528",
"refsource": "OSVDB",
"url": "http://osvdb.org/34528"
},
{
"name": "34531",
"refsource": "OSVDB",
"url": "http://osvdb.org/34531"
},
{
"name": "1017821",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1017821"
},
{
"name": "2484",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2484"
},
{
"name": "34529",
"refsource": "OSVDB",
"url": "http://osvdb.org/34529"
},
{
"name": "ADV-2007-1164",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1164"
},
{
"name": "ironmail-multiple-xss(33232)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33232"
},
{
"name": "20070326 Multiple XSS in IronMail",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/463827/100/0/threaded"
},
{
"name": "34530",
"refsource": "OSVDB",
"url": "http://osvdb.org/34530"
},
{
"name": "34533",
"refsource": "OSVDB",
"url": "http://osvdb.org/34533"
},
{
"name": "http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html",
"refsource": "MISC",
"url": "http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html"
},
{
"name": "24657",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24657"
},
{
"name": "34527",
"refsource": "OSVDB",
"url": "http://osvdb.org/34527"
},
{
"name": "34532",
"refsource": "OSVDB",
"url": "http://osvdb.org/34532"
},
{
"name": "34526",
"refsource": "OSVDB",
"url": "http://osvdb.org/34526"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1723",
"datePublished": "2007-03-28T00:00:00.000Z",
"dateReserved": "2007-03-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T13:06:26.085Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-5210 (GCVE-0-2006-5210)
Vulnerability from cvelistv5 – Published: 2006-10-16 23:00 – Updated: 2024-08-07 19:41
VLAI
EPSS
VEX
Summary
Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded "../" sequences ("%252e%252e/").
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://supportcenter.ciphertrust.com/vulnerabili… | x_refsource_MISC |
| http://securitytracker.com/id?1017069 | vdb-entryx_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2006/4055 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/20436 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/22406 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/448779/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/1726 | third-party-advisoryx_refsource_SREASON |
| http://www.symantec.com/enterprise/research/SYMSA… | x_refsource_MISC |
Date Public
2006-10-13 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T19:41:05.083Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html"
},
{
"name": "1017069",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017069"
},
{
"name": "ADV-2006-4055",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/4055"
},
{
"name": "20436",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/20436"
},
{
"name": "22406",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/22406"
},
{
"name": "ironwebmail-url-directory-traversal(29620)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29620"
},
{
"name": "20061013 SYMSA-2006-010: Directory Traversal in IronWebMail",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/448779/100/0/threaded"
},
{
"name": "1726",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1726"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-10-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded \"../\" sequences (\"%252e%252e/\")."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html"
},
{
"name": "1017069",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017069"
},
{
"name": "ADV-2006-4055",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/4055"
},
{
"name": "20436",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/20436"
},
{
"name": "22406",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/22406"
},
{
"name": "ironwebmail-url-directory-traversal(29620)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29620"
},
{
"name": "20061013 SYMSA-2006-010: Directory Traversal in IronWebMail",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/448779/100/0/threaded"
},
{
"name": "1726",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1726"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-5210",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded \"../\" sequences (\"%252e%252e/\")."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html",
"refsource": "MISC",
"url": "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html"
},
{
"name": "1017069",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017069"
},
{
"name": "ADV-2006-4055",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4055"
},
{
"name": "20436",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/20436"
},
{
"name": "22406",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/22406"
},
{
"name": "ironwebmail-url-directory-traversal(29620)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29620"
},
{
"name": "20061013 SYMSA-2006-010: Directory Traversal in IronWebMail",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/448779/100/0/threaded"
},
{
"name": "1726",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1726"
},
{
"name": "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt",
"refsource": "MISC",
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-5210",
"datePublished": "2006-10-16T23:00:00.000Z",
"dateReserved": "2006-10-09T00:00:00.000Z",
"dateUpdated": "2024-08-07T19:41:05.083Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0538 (GCVE-0-2006-0538)
Vulnerability from cvelistv5 – Published: 2006-02-04 00:00 – Updated: 2024-08-07 16:41
VLAI
EPSS
VEX
Summary
CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/407 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/16465 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1015555 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/423898/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-02-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:41:28.387Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "407",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/407"
},
{
"name": "ironmail-tcpsyn-flood-dos(24445)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24445"
},
{
"name": "16465",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16465"
},
{
"name": "1015555",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015555"
},
{
"name": "20060203 IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/423898/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "CipherTrust IronMail 5.0.1, when \"Denial of Service Protection\" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "407",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/407"
},
{
"name": "ironmail-tcpsyn-flood-dos(24445)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24445"
},
{
"name": "16465",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16465"
},
{
"name": "1015555",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015555"
},
{
"name": "20060203 IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/423898/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0538",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "CipherTrust IronMail 5.0.1, when \"Denial of Service Protection\" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "407",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/407"
},
{
"name": "ironmail-tcpsyn-flood-dos(24445)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24445"
},
{
"name": "16465",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16465"
},
{
"name": "1015555",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015555"
},
{
"name": "20060203 IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/423898/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0538",
"datePublished": "2006-02-04T00:00:00.000Z",
"dateReserved": "2006-02-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:41:28.387Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}