CVE-2000-0526

Description

mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Affected products

• 3r_soft / mailstudio_20002.0 – 2.0

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html
• MISChttp://www.securityfocus.com/bid/1335