CVE-2006-0611: Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attacker...

Security readout for executives and security teams

This is a legacy @Mail Windows webmail flaw. A remote attacker could abuse a file-upload path parameter to place files outside the intended upload directory. The business concern is unmanaged old webmail exposed to the internet; the bundle does not show confirmed active exploitation. Exposure appears limited to @Mail 4.3 and earlier running on Windows, especially internet-facing webmail deployments. The provided affected-product metadata is sparse, so validation should rely on installed software discovery and webmail route review. Prioritize discovery and retirement of affected legacy webmail. If found internet-facing, handle as urgent because remote arbitrary file placement can create significant integrity risk, even though active exploitation is not established in the supplied sources. Mitigation focus: Inventory and remove any @Mail 4.3 or earlier Windows deployments.; Check Atmail vendor guidance or support archives for the official remediation.; Upgrade or replace unsupported @Mail installations where vendor guidance is unavailable..

Prepared

Jun 29, 2026, 14:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.