What’s Vulnerable › Vulnerabilities

CVE-2006-4491

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-08-31 · updated 2026-06-16

Description

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected products

• Cybozu Collaborex: all versions
• Cybozu Ag: 1.2(1.4)
• Cybozu Pocket: 5.2(0.7)
• Cybozu Garoon 1: 1.5(4.0)
• Cybozu, Inc. Cybozu Mailwise: 3.0(0.2)

References

• http://cybozu.co.jp/products/dl/notice_060825/
• http://jvn.jp/jp/JVN%2390420168/index.html
• http://secunia.com/advisories/21638
• http://secunia.com/advisories/21656
• http://securitytracker.com/id?1016759
• http://www.osvdb.org/28262
• http://cybozu.co.jp/products/dl/notice_060825/
• http://jvn.jp/jp/JVN%2390420168/index.html
• http://secunia.com/advisories/21638
• http://secunia.com/advisories/21656
• http://securitytracker.com/id?1016759
• http://www.osvdb.org/28262

Get alerted when CVE-2006-4491 or the next vulnerability affects your stack