CVE-2006-5487

CRÍTICO 10.0CVE-2006-5487 · Published 10/11/2006 · updated 16/06/2026

En resumen

CVE-2006-5487 es una vulnerabilidad CRÍTICO (CVSS 10.0) que afecta a mailmarshal smtp (marshal).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.0%, mayor que el 90.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
mailmarshal smtp marshal	`= 2006= 5.0= 6.0`	No fix yet

Description

Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive.

References

secunia.com/advisories/22806 · Vendor Advisory
securityreason.com/securityalert/1857
securitytracker.com/id
marshal.com/kb/article.aspx · Patch
securityfocus.com/archive/1/451143/100/0/threaded
securityfocus.com/bid/20999
vupen.com/english/advisories/2006/4457
zerodayinitiative.com/advisories/ZDI-06-039.html · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/30188

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free