CVE-2005-0332: Ventia Desknow Mail And Collaboration Server

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do.

Affected products

• Ventia Desknow Mail And Collaboration Server: version 2.5.12 only; version 2.5.13 only

Published 2005-05-02. Last modified 2026-06-16.