CVE-2006-4258: John Hanna Anti-Spam Smtp Proxy Server

Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP) allows remote authenticated users to read arbitrary files via (1) C:\ (Windows drive letter), (2) UNC, and possibly other types of paths in the file parameter.

Affected products

• John Hanna Anti-Spam Smtp Proxy Server: version 1.2.3 only

Published 2006-08-21. Last modified 2026-06-16.