CVE-2005-0367
Last modified
CVE-2005-0367 is a vulnerability of currently unknown severity. Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) the filename of an e-mail attachment, (2) the _msgatt.rec file, (3) and the /msg, /delete, /folderadd, and /folderdelete operations for the Folder parameter.. EPSS estimates a 1.86% chance of exploitation in the next 30 days.
Description
Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) the filename of an e-mail attachment, (2) the _msgatt.rec file, (3) and the /msg, /delete, /folderadd, and /folderdelete operations for the Folder parameter.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Argosoft | Argosoft Mail Server | 1.8.7.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-0367?
How severe is CVE-2005-0367?
How do I fix CVE-2005-0367?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-0360The Microsoft Log Sink Class ActiveX control in pkmcore.dll …
- CVE-2005-0362awstats.pl in AWStats 6.2 allows remote attackers to execute…
- CVE-2005-0363awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to…
- CVE-2005-0364Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.1…
- CVE-2005-0365The dcopidlng script in KDE 3.2.x and 3.3.x creates temporar…
- CVE-2005-0366The integrity check feature in OpenPGP, when handling a mess…
- CVE-2005-0368Multiple SQL injection vulnerabilities in CMScore allow remo…
- CVE-2005-0369Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7…5.3
- CVE-2005-0370Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7…
- CVE-2005-0371Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7…
- CVE-2005-0372Directory traversal vulnerability in gftp before 2.0.18 for …
- CVE-2005-0373Buffer overflow in digestmd5.c CVS release 1.170 (also refer…
Are you affected by CVE-2005-0367?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST