CVE:CVE-2008-0946
CNNVD:CNNVD-200802-454
Ipswitch Instant Messaging (IM)的IM Server(又称Imserve或IMserver)存在目录遍历漏洞。远程认证用户可以借助信息接收器字段中的".." 创建任意的空文件。
solution:Upgrade ipswitch imserver to a higher version than 2.0.8.1,and avoid the version (,2.0.8.1]; Upgrade ipswitch instant_messaging to a higher version than 2.0.8.1,and avoid the version (,2.0.8.1]