CVE-2006-5210

CVE-2006-5210 describes a directory traversal vulnerability in IronWebMail versions prior to 6.1.1 HotFix-17, specifically affecting CipherTrust IronMail. This flaw allows unauthenticated remote attackers to read arbitrary files on the system by injecting double-URL-encoded directory traversal sequences into a GET request. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and its low attack complexity (AC:L) means it can be exploited easily with no authentication required (Au:N), leading to potential information disclosure (C:P). While there is no evidence of active exploitation in the wild or Metasploit/Nuclei modules, an ExploitDB entry (EDB-28778) confirms the existence of public exploit code, though community discussion and media coverage are minimal.