20020703 Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversalmailing list
http://archives.neohapsis.com/archives/bugtraq/2002-07/0029.html CVE-2002-1004
ArGoSoft 1.8 Mail Server - Directory Traversal
Record summary
CVE-2002-1004 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBArGoSoft 1.8 Mail Server - Directory TraversalExploitDB exploitby team n.finityNot analyzed1 file
References
5argosoft.comConfirmation
http://www.argosoft.com/applications/mailserver/changelist.asp argosoft-dotdot-directory-traversal(9477)vdb entry
http://www.iss.net/security_center/static/9477.php 5144vdb entry
http://www.securityfocus.com/bid/5144 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1004