CVE-2002-1004

Description

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.

Affected products

• argosoft / argosoft_mail_server1.8.1.5 – 1.8.1.5
• argosoft / argosoft_mail_server1.8.1.5 – 1.8.1.5

References

• MISChttp://www.argosoft.com/applications/mailserver/changelist.asp
• MISChttp://archives.neohapsis.com/archives/bugtraq/2002-07/0029.html
• MISChttp://www.securityfocus.com/bid/5144
• MISChttp://www.iss.net/security_center/static/9477.php