PT-2004-2619 · Clearswift · Mimesweeper For Web

Publicado 2004-08-11 · Atualizado 2017-07-11 · CVE-2004-1715

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MIMEsweeper for Web versions prior to 5.0.4

Description A directory traversal issue allows remote attackers or local users to read arbitrary files by using ".." or similar dot dot sequences in the URL.

Recommendations For versions prior to 5.0.4, update to version 5.0.4 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2004-1715

Produtos afetados

Mimesweeper For Web

Referências · 7

• 🔥 http://packetstormsecurity.nl/0408-exploits/clearswift.txt · Exploit
• 🔥 http://securityfocus.com/bid/10918 · Exploit
• http://secunia.com/advisories/12273 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16960 · Nota
• http://marc.info/?l=bugtraq&m=109225567212978&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1715 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=109224211512029&w=2 · Nota