medium5.0
CVE-2004-1715
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and sim…
Impact
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot sequences in the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clearswift | Mimesweeper For Web | Versions 4.0, 5.0.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109224211512029&w=2
- http://marc.info/?l=bugtraq&m=109225567212978&w=2
- http://packetstormsecurity.nl/0408-exploits/clearswift.txt
- http://secunia.com/advisories/12273
- http://www.securityfocus.com/bid/10918
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16960
- http://marc.info/?l=bugtraq&m=109224211512029&w=2
- http://marc.info/?l=bugtraq&m=109225567212978&w=2
- http://packetstormsecurity.nl/0408-exploits/clearswift.txt
- http://secunia.com/advisories/12273
- http://www.securityfocus.com/bid/10918
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16960