OSVDB ID: 22764

Title: E-Post Multiple Products IMAP LIST Command Traversal Arbitrary Directory Listing

Info

Disclosure
Jan 25, 2006

Discovery
Jan 13, 2006

Dates

Exploit
Unknown

Solution
Unknown

Description

 E-Post contains a flaw that allows a remote attacker to list arbitrary directories on the server outside of the mail directory. The issue is due to the IMAP service not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the arguments to the LIST command.

Classification

 Location: Remote / Network Access
Attack Type: Information Disclosure, Input Manipulation
Impact: Loss of Confidentiality
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, E-POST Inc. has released a patch to address this vulnerability.

Products

E-POST Inc.

E-Post Mail Server Enterprise

 4.10

E-Post Mail Server

 4.10

E-Post SMTP Server Enterprise

 4.10

E-Post SMTP Server

 4.10

SPA-PRO Mail @Solomon Enterprise

 4.00

SPA-PRO Mail @Soloman

 4.00

SPA-PRO SMTP @Soloman

 4.00

References

Credit
  • Tan Chew Keong - vulnsecunia.com - Secunia Research


Direct URL: http://osvdb.org/22764