This script is Copyright (C) 2006-2015 Tenable Network Security, Inc.
The remote IMAP server is prone to multiple directory traversal
The remote host appears to be running WinGate, a Windows application
for managing and securing Internet access.
The version of WinGate installed on the remote host fails to remove
directory traversal sequences from the 'CREATE', 'SELECT', 'DELETE',
'RENAME', 'COPY', 'APPEND', and 'LIST' commands before using them to
access messages. An authenticated attacker may be able to exploit
this issue to read mail belong to other users and to create / rename /
delete arbitrary directories on the affected system.
See also :
Upgrade to WinGate 6.1.4 Build 1099 or later.
Risk factor :
Medium / CVSS Base Score : 5.5
CVSS Temporal Score : 5.2
Public Exploit Available : true