PT-2012-3652
CVE-2012-1919
·
تاريخ النشر
2012-03-27
·
تاريخ التحديث
2012-08-29
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
AtMail Open-Source versions prior to 1.05
Description
The issue concerns a CRLF injection vulnerability in the mime.php file of the @Mail WebMail Client. This vulnerability allows remote attackers to conduct directory traversal attacks and read arbitrary files by including a %0A sequence followed by a .. (dot dot) in the
file parameter.Recommendations
For versions prior to 1.05, update to version 1.05 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾