20020507 Multiple Vulnerabilities in MDaemon + WorldClientmailing list
http://online.securityfocus.com/archive/1/271374 CVE-2002-1741
WorldClient 5.0.x - Arbitrary File Deletion
Record summary
CVE-2002-1741 has a selected CVSS score of 7.2; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." (dot dot) in the Attachments parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWorldClient 5.0.x - Arbitrary File DeletionExploitDB exploitby ObscureNot analyzed1 file
References
44687vdb entry
http://www.securityfocus.com/bid/4687 mdaemon-worldclient-delete-files(9027)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/9027 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1741