CVE-2008-0464: Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail...

Security readout for executives and security teams

This flaw lets a remote attacker read files from a vulnerable Aconon Mail server by abusing a directory traversal issue in archiv.cgi. For executives, the main risk is unauthorized disclosure of sensitive server or mail-system data. The source bundle does not provide CVSS, patch status, or evidence of active exploitation. Exposure is likely limited to organizations still running the named legacy Aconon Mail Enterprise SQL versions with archiv.cgi reachable by untrusted users, especially from the internet. Evidence is insufficient for other versions or products. Treat as high priority only if the named legacy software is still present. The business risk is sensitive file disclosure from a mail server. If the product is absent, no action is needed beyond documenting non-exposure. Mitigation focus: Identify and retire affected Aconon Mail versions where still deployed.; Check vendor or archival advisory guidance for any official fix.; Remove internet exposure for archiv.cgi and the mail administration surface..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.