CVE-2004-1715 Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\", "..", and similar dot dot sequences in the URL.
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\", "..", and similar dot dot sequences in the URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mimesweeper for web | = 4.0 | No fix listed |
| clearswift mimesweeper for web | = 5.0.1 | No fix listed |
References
- 20040811 Clearswift Mimesweeper Path Traversal Vulnerability mailing-list
- 20040811 Re: Clearswift Mimesweeper Path Traversal Vulnerability mailing-list
- packetstormsecurity.nl exploit vendor-advisory
- 12273 third-party-advisory vendor-advisory
- 10918 exploit patch vdb-entry vendor-advisory
- mimesweeper-directory-traversal(16960) vdb-entry