Unrated severityNVD Advisory· Published Sep 23, 2006· Updated Apr 16, 2026
CVE-2006-4955
CVE-2006-4955
Description
Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters.
Affected products
2cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*+ 1 more
- cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*
- cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- secunia.com/advisories/22029nvdPatchVendor Advisory
- vuln.sg/neonmail506-en.htmlnvdExploitPatch
- www.securityfocus.com/bid/20109nvdExploitPatch
- www.securityfocus.com/bid/84199nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29090nvd
News mentions
0No linked articles in our index yet.