CVE:CVE-2006-0448
CNNVD:CNNVD-200601-351
E-Post Mail 4.05和SPA-PRO Mail 4.05的IMAP服务中的(1) EPSTIMAP4S.EXE和(2) SPA-IMAP4S.EXE内的多个目录遍历漏洞，远程攻击者(a)通过LIST命令列出任意目录或使系统拒绝服务；或者通过(b) APPEND、(c) COPY或(d) RENAME命令创建任意文件。
solution:Upgrade e-post_corporation mail_server to a higher version than 4.05,and avoid the version 4.05; Upgrade e-post_corporation spa-pro_mail_atsolomon to a higher version than 4.05,and avoid the version 4.05