CVE-2005-1902
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SPA-PRO Mail @Solomon 4.00软件的IMAP服务存在目录遍历漏洞，远程验证用户可借助：(1)SELECT，(2)CREATE，(3)DELETE和(4)RENAME指令中的".."序列来读取其他用户的邮件，并对任意目录执行操作。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2005-1902
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary directories via .. sequences in the (1) SELECT, (2) CREATE, (3) DELETE, and (4) RENAME commands.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SPA-PRO Mail @Solomon IMAP服务 目录遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SPA-PRO Mail @Solomon 4.00软件的IMAP服务存在目录遍历漏洞，远程验证用户可借助：(1)SELECT，(2)CREATE，(3)DELETE和(4)RENAME指令中的".."序列来读取其他用户的邮件，并对任意目录执行操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2005-1902
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2005-1902
请登录查看更多情报信息。
Vendor Advisories for CVE-2005-1902 (5)
Other References for CVE-2005-1902 (1)
-
http://www.security.org.sg/vuln/spa-promail4.html x_refsource_MISC
Same Patch Batch · n/a · 2005-06-08 · 25 CVEs total
| CVE-2005-1899 | Rakkarsoft RakNet 远程拒绝服务漏洞 | |
| CVE-2005-1911 | Leafnode 拒绝服务攻击漏洞 | |
| CVE-2005-1910 | WWWeb Concepts Events System 'login.asp'脚本 SQL注入漏洞 | |
| CVE-2005-1909 | 602LAN SUITE 2004 跨站脚本攻击漏洞 | |
| CVE-2005-1908 | Perception LiteWeb 文件访问控制绕过漏洞 | |
| CVE-2005-1907 | Microsoft ISA Server SecureNAT未明拒绝服务漏洞 | |
| CVE-2005-1906 | livingmailing 'login.asp'脚本 SQL注入漏洞 | |
| CVE-2005-1905 | Kaspersky 'klif.sys'权限提升漏洞 | |
| CVE-2005-1904 | JiRo's Upload System (JUS)'login.asp'脚本 SQL注入漏洞 | |
| CVE-2005-1903 | SPA-PRO Mail @Solomon IMAP服务 缓冲区溢出漏洞 | |
| CVE-2005-1901 | Sawmill 多个跨站脚本攻击漏洞 | |
| CVE-2005-1900 | Sawmill 认证绕过漏洞 | |
| CVE-2005-1887 | Solaris 本地用户特权获得漏洞 | |
| CVE-2005-1898 | PHPThum中远程文件信息泄露漏洞 | |
| CVE-2005-1897 | FlexCast Audio Video Streaming Server 未知安全漏洞 | |
| CVE-2005-1896 | FlatNuke 2.5.3 'thumb.php'脚本 目录遍历漏洞 | |
| CVE-2005-1895 | FlatNuke 跨站脚本攻击漏洞 | |
| CVE-2005-1894 | FlatNuke 2.5.3 直接代码注入漏洞 | |
| CVE-2005-1893 | FlatNuke 敏感信息泄露漏洞 | |
| CVE-2005-1892 | FlatNuke 敏感信息泄露漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2005-1902
No comments yet