Vulnerability in Cybozu Collaborex
CVE-2006-4491
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.0 (Medium). Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.016 (74.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 75th percentile — 74.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: +0.000
Affected products
- Cybozu Collaborex
- Cybozu Ag — versions 1.2\(1.4\), 1.2(1.4)
- Cybozu Pocket — versions 5.2(0.7), 5.2\(0.7\)
- Cybozu Garoon 1 — versions 1.5(4.0), 1.5\(4.0\)
- Cybozu Mailwise — versions 3.0(0.2), 3.0\(0.2\)
References
- jvn.jp/jp/JVN#90420168/index.html (Patch, third-party-advisory)
- cybozu.co.jp/products/dl/notice_060825/ (Patch)
- www.osvdb.org/28262 (vdb-entry)
- securitytracker.com/id (Patch, vdb-entry)
- secunia.com/advisories/21638 (Vendor Advisory, third-party-advisory)
- secunia.com/advisories/21656 (Patch, Vendor Advisory, third-party-advisory)