CVE-2006-0891
Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via ..
Does this matter?
Lower severity and a low EPSS score (8.49%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing NULL (%00) byte in (1) the _SESSION['nocc_theme'] parameter in (a) html/footer.php; and (2) the lang and (3) theme parameters and the (4) Accept-Language HTTP header field, when force_default_lang is disabled, in (b) index.php, as demonstrated by injecting PHP code into a profile and accessing it using the lang parameter in index.php.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 8.49% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- nocc/nocc
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.htmlExploit
- http://retrogod.altervista.org/noccw_10_incl_xpl.html
- http://secunia.com/advisories/16921Vendor Advisory
- http://securitytracker.com/id?1015671
- http://www.osvdb.org/23416
- http://www.osvdb.org/23417
- http://www.osvdb.org/23418
- http://www.osvdb.org/23419
- http://www.securityfocus.com/bid/16793
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24934
- http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.htmlExploit
- http://retrogod.altervista.org/noccw_10_incl_xpl.html
- http://secunia.com/advisories/16921Vendor Advisory
- http://securitytracker.com/id?1015671
- http://www.osvdb.org/23416
- http://www.osvdb.org/23417
- http://www.osvdb.org/23418
- http://www.osvdb.org/23419
- http://www.securityfocus.com/bid/16793
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24934
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.