Back to Database
Status published
Medium
CVE-2006-0893
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information...
Vulnerability Description
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and (2) the tmp directory, which lists names of uploaded attachments.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-0893
Credits & Attribution
No credits recorded in the NVD database.
References
More from nocc
View All →CVE-2006-0895
NOCC Webmail 1.0 allows remote attackers to obtain the installation...
Medium
5
CVE-2006-0894
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow...
Medium
4.3
CVE-2006-0892
NOCC Webmail 1.0 stores e-mail attachments in temporary files with...
High
7.5
CVE-2006-0891
Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote...
Medium
5
CVE-2002-2343
Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows...
Medium
4.3
Affected Vendor
nocc
View all reports →Affected Software
nocc
Vulnerable Versions:
1.0
Timeline
Official Publish:
February 25th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.