Secunia

Tan Chew Keong has reported some vulnerabilities in ArGoSoft Mail Server, which can be exploited by malicious users to disclose and manipulate sensitive information, and potentially compromise a user's system.

1) An input validation error in the attachment handling can be exploited to create or overwrite arbitrary files via directory traversal attacks.

2) The problem is that the "_msgatt.rec" file, which holds information about uploaded files, can be overwritten by an uploaded attachment. This can be exploited to include arbitrary files as attachments in an mail via directory traversal attacks.

3) Input passed to the "Folder" parameter in "msg", "delete", "folderdelete" and "folderadd" isn't properly sanitised before being used. This can be exploited to access or delete mails for other currently logged on users, and create or delete arbitrary directories via directory traversal attacks.

The vulnerabilities have been reported in version 1.8.7.3 and prior.

Solution
Update to version 1.8.7.8.
Further details available in Customer Area

Provided and/or discovered by
Tan Chew Keong

Changelog
Further details available in Customer Area

Original Advisory
http://www.security.org.sg/vuln/argosoftmail1873.html

Deep Links
Links available in Customer Area