vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2006-0817

N/A
Published: July 18, 2006 at 11:00 PM UTC
Updated: June 16, 2026 at 10:21 PM UTC
3 products affected across 3 vendorsWeb MailMail ServerVisnetic Mail Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 6%

Description

Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the (1) language parameter in accounts/inc/include.php and (2) lang_settings parameter in admin/inc/include.php, which is not properly sanitized by the securepath function, a related issue to CVE-2005-4556.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (14)

Third Party Advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/18953
Third Party Advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/18966
x_refsource_MISCExploitVendor Advisory
Source: [email protected]
http://secunia.com/secunia_research/2006-12/advisory/
x_refsource_MISCExploitVendor Advisory
Source: [email protected]
http://secunia.com/secunia_research/2006-14/advisory/
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://securitytracker.com/id?1016513
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://securitytracker.com/id?1016514
VDB Entryx_refsource_OSVDB
Source: [email protected]
http://www.osvdb.org/27328
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/440297/100/0/threaded

CVSS

5MEDIUM[email protected]
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card