CVE-2005-1105
JavaMail 1.3.2 - Directory Traversal and Arbitrary File Write via Content-Disposition Filename
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-1105. PoCs published by Rafael San Miguel Carrasco.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in Sun JavaMail 1.3.2, where improper validation of filenames in email attachments allows traversal. The example shows a malicious 'Content-Disposition' header that could exploit this flaw.
Description
Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Disposition header.
Exploits (1)
The provided text describes a directory traversal vulnerability in Sun JavaMail 1.3.2, where improper validation of filenames in email attachments allows traversal. The example shows a malicious 'Content-Disposition' header that could exploit this flaw.