VulnerabilityModified
CVE-2005-3189
Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via ".." sequences in the SELECT command.
MEDIUM 5.0EPSS 5.84%
Does this matter?
Lower severity and a low EPSS score (5.84%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via ".." sequences in the SELECT command.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 5.84% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- qualcomm/worldmail imap server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/17640
- http://securityreason.com/securityalert/192
- http://securitytracker.com/id?1015236
- http://www.idefense.com/application/poi/display?id=341&type=vulnerabilitiesVendor Advisory
- http://www.securityfocus.com/bid/15488
- http://www.vupen.com/english/advisories/2005/2479
- http://secunia.com/advisories/17640
- http://securityreason.com/securityalert/192
- http://securitytracker.com/id?1015236
- http://www.idefense.com/application/poi/display?id=341&type=vulnerabilitiesVendor Advisory
- http://www.securityfocus.com/bid/15488
- http://www.vupen.com/english/advisories/2005/2479
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.