CyberSec.Space Logo
CVEブラウザに戻る

CVE-2010-3460

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.1860%
EPSS Percentile4.42th
Published2010年9月17日
Last Modified2026年4月29日

Vulnerability Description

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.

Affected Platforms (CPE)

📦
Gecad

Axigen Mail Server

<= 7.4.1
📦
Gecad

Axigen Mail Server

All versions
📦
Gecad

Axigen Mail Server

= 1.0.1
📦
Gecad

Axigen Mail Server

= 1.0.2
📦
Gecad

Axigen Mail Server

= 1.0.5
📦
Gecad

Axigen Mail Server

= 1.0.6
📦
Gecad

Axigen Mail Server

= 1.0.7
📦
Gecad

Axigen Mail Server

= 1.1.0
📦
Gecad

Axigen Mail Server

= 1.1.0
📦
Gecad

Axigen Mail Server

= 1.1.1
📦
Gecad

Axigen Mail Server

= 1.2.0
📦
Gecad

Axigen Mail Server

= 1.2.0
📦
Gecad

Axigen Mail Server

= 1.2.3
📦
Gecad

Axigen Mail Server

= 1.2.4
📦
Gecad

Axigen Mail Server

= 1.2.5
📦
Gecad

Axigen Mail Server

= 1.2.5
📦
Gecad

Axigen Mail Server

= 1.2.6
📦
Gecad

Axigen Mail Server

= 2.0
📦
Gecad

Axigen Mail Server

= 2.0.3
📦
Gecad

Axigen Mail Server

= 2.0.4
📦
Gecad

Axigen Mail Server

= 2.0.5
📦
Gecad

Axigen Mail Server

= 3.0
📦
Gecad

Axigen Mail Server

= 3.0
📦
Gecad

Axigen Mail Server

= 3.0.1
📦
Gecad

Axigen Mail Server

= 4.0
📦
Gecad

Axigen Mail Server

= 4.0
📦
Gecad

Axigen Mail Server

= 4.0.1
📦
Gecad

Axigen Mail Server

= 4.0.2
📦
Gecad

Axigen Mail Server

= 5.0
📦
Gecad

Axigen Mail Server

= 5.0
📦
Gecad

Axigen Mail Server

= 5.0.1
📦
Gecad

Axigen Mail Server

= 5.0.2
📦
Gecad

Axigen Mail Server

= 5.0.3
📦
Gecad

Axigen Mail Server

= 6.0.1
📦
Gecad

Axigen Mail Server

= 6.1
📦
Gecad

Axigen Mail Server

= 6.1
📦
Gecad

Axigen Mail Server

= 6.2
📦
Gecad

Axigen Mail Server

= 6.2.2
📦
Gecad

Axigen Mail Server

= 7.0
📦
Gecad

Axigen Mail Server

= 7.0
📦
Gecad

Axigen Mail Server

= 7.1
📦
Gecad

Axigen Mail Server

= 7.1.1
📦
Gecad

Axigen Mail Server

= 7.1.2
📦
Gecad

Axigen Mail Server

= 7.1.3
📦
Gecad

Axigen Mail Server

= 7.1.4
📦
Gecad

Axigen Mail Server

= 7.2
📦
Gecad

Axigen Mail Server

= 7.2
📦
Gecad

Axigen Mail Server

= 7.2.1
📦
Gecad

Axigen Mail Server

= 7.3
📦
Gecad

Axigen Mail Server

= 7.3
📦
Gecad

Axigen Mail Server

= 7.3.1
📦
Gecad

Axigen Mail Server

= 7.3.2
📦
Gecad

Axigen Mail Server

= 7.3.3
📦
Gecad

Axigen Mail Server

= 7.4
📦
Gecad

Axigen Mail Server

= 7.4

References & Advisories

🔗 http://packetstormsecurity.org/1009-exploits/axigen741-traversal.txt
🔗 http://secunia.com/advisories/41430
🔗 http://www.acunetix.com/blog/news/directory-traversal-axigen/
🔗 http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.html
🔗 http://www.osvdb.org/68027
🔗 http://www.securityfocus.com/bid/43230
🔗 http://www.vupen.com/english/advisories/2010/2415
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/61826

関連する脆弱性情報

CVE-2008-04349.3

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code ...

CVE-2020-269429.1

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to...

CVE-2012-49406.4

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to ...

CVE-2015-53795.4

Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remo...