Description (CNA)
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot sequences in the URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/10918
- http://marc.info/?l=bugtraq&m=109225567212978&w=2
- http://packetstormsecurity.nl/0408-exploits/clearswift.txt
- http://marc.info/?l=bugtraq&m=109224211512029&w=2
- http://secunia.com/advisories/12273
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16960
ADP enrichment
No English description supplied.