Description (CNA)
Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://aluigi.altervista.org/adv/ipsimene-adv.txt
- http://www.securityfocus.com/archive/1/487748/100/200/threaded
- http://www.securityfocus.com/bid/27677
- http://securityreason.com/securityalert/3697
- http://aluigi.org/poc/ipsimene.zip
ADP enrichment
No English description supplied.