Vulnerabilities

TI-2006-01214 CVE-2006-1255 · GHSA-24vr-fq5x-chmc

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier…

HIGH 80

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to th…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.6877 Published 2006-03-19 No fix listed

TI-2005-01566 CVE-2005-1657 · GHSA-cgj9-8jxp-q89c

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote…

LOW 37

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) o…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01905 Published 2005-05-18 No fix listed

TI-2005-01565 CVE-2005-1656 · GHSA-rj97-vwfq-6x8r

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files…

LOW 25

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20").

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01306 Published 2005-05-18 No fix listed

Vulnerabilities

Filters

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier…

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote…

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files…