CVE-2005-1252 | BDVDB-2026-10431 Detail

Description#

Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities
http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
http://www.securityfocus.com/bid/13727
http://securitytracker.com/id?1014047

Exploit#

No public exploit known

History#

Version 12005-05-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.