CVE-2007-3702 Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the archi...
MediumCVSS 5.0
EPSS 7.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the archives parameter in a Load action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mail machine | = 3.980 | No fix listed |
| mail machine | = 3.985 | No fix listed |
| mail machine | = 3.987 | No fix listed |
| mail machine | = 3.988 | No fix listed |
| mail machine | = 3.989 | No fix listed |
References
- 38452 vdb-entry
- 26009 third-party-advisory
- 24852 exploit vdb-entry
- ADV-2007-2519 vdb-entry
- mailmachine-mailmachine-file-include(35327) vdb-entry
- 4171 exploit