medium5.0
CVE-2004-2586
Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files vi…
Impact
Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files via the filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartertools | Smartermail | Versions 1.6.1511, 1.6.1529 |
References
- NVD record
- CVE.org record
- http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt
- http://secunia.com/advisories/11042
- http://securitytracker.com/id?1009307
- http://www.zone-h.org/advisories/read/id=4098
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15389
- http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt
- http://secunia.com/advisories/11042
- http://securitytracker.com/id?1009307
- http://www.zone-h.org/advisories/read/id=4098
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15389