CVE-2008-0464 Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. (dot dot...
MediumCVSS 5.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| absofort aconon mail enterprise sql | = 11.5.1-2004 | No fix listed |
| absofort aconon mail enterprise sql | = 11.7.0-2007 | No fix listed |
References
- burnachurch.com
- 20080124 Directory Traversal Vulnerability in Aconon Mail exploit mailing-list
- 28617 third-party-advisory vendor-advisory
- 27427 exploit vdb-entry
- ADV-2008-0310 vdb-entry
- 4977 exploit