CVE-2005-0332

HIGH 7.5CVE-2005-0332 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0332 is a HIGH (CVSS 7.5) vulnerability affecting desknow mail and collaboration server (ventia).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
desknow mail and collaboration server ventia	`= 2.5.12= 2.5.13`	No fix yet

Description

Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do.

References

marc.info
secunia.com/advisories/14116
securitytracker.com/id
security.org.sg/vuln/desknow2512.html · Vendor Advisory
securityfocus.com/bid/12421 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/19206
exchange.xforce.ibmcloud.com/vulnerabilities/19211
exchange.xforce.ibmcloud.com/vulnerabilities/19212

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free