CVE-2002-1004 Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
MediumCVSS 5.0
EPSS 8.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| argosoft mail server | = 1.8.1.5 | No fix listed |
References
- 20020703 Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal mailing-list
- www.argosoft.com
- argosoft-dotdot-directory-traversal(9477) exploit patch vdb-entry vendor-advisory
- 5144 exploit patch vdb-entry vendor-advisory