CVE-1999-0927

Gordano NTMail - Unauthenticated Arbitrary File Read via Dot-Dot Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0927. PoCs published by Marc.

AI-analyzed exploit summary The vulnerability in Gordano's NTMail allows remote attackers to retrieve arbitrary files outside the web server's document root via directory traversal sequences (e.g., '../') in the URL. This is due to insufficient path validation in the web server component.

Description

NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Marc · textremotemultiple
https://www.exploit-db.com/exploits/19222

The vulnerability in Gordano's NTMail allows remote attackers to retrieve arbitrary files outside the web server's document root via directory traversal sequences (e.g., '../') in the URL. This is due to insufficient path validation in the web server component.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Gordano NTMail
No auth needed
Prerequisites: Knowledge of target file paths · Network access to the NTMail web server
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Various Sources third-party-advisory x_refsource_eeye
http://www.eeye.com/html/Research/Advisories/AD05261999.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/279

Scores

EPSS 0.0577
EPSS Percentile 92.1%

Details

Status published
Products (1)
gordano/ntmail 4.20
Published May 26, 1999
Tracked Since Feb 18, 2026