DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities (CVE-2005-0332)

A directory traversal vulnerability was found in DeskNow webmail file attachment upload feature that may be exploited to upload files to arbitrary locations on the server. A second directory traversal vulnerability exists in the document repository file delete feature.

DeskNow 网络邮件的文件附件上传功能存在目录遍历漏洞，该漏洞可能被利用上传文件至服务器上的任意位置。此外，文档存储库的文件删除功能亦存在第二个目录遍历漏洞。