CVE-2005-0845 | BDVDB-2026-9001 Detail

Description#

Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. (dot dot) in the attach_id parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=
http://marc.info/?l=bugtraq&m=111159967417903&w=2
http://secunia.com/advisories/14658
http://www.security.org.sg/vuln/surgemail22g3.html

Exploit#

No public exploit known

History#

Version 12005-03-24Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.