PT-2015-4934 · All-Mail · Al-Mail32

Yosuka Hasegawa · Publicado 2015-02-20 · Atualizado 2015-02-20 · CVE-2015-0878

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions AL-Mail32 versions prior to 1.13d

Description A directory traversal issue allows remote attackers to write to arbitrary files by crafting the filename of an attachment.

Recommendations For versions prior to 1.13d, update to version 1.13d or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2015-0878

Produtos afetados

Al-Mail32

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-0878 · Nota de Segurança
• http://almail.com/vulnerability.html · Aviso do Fabricante
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000020 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN77294617/index.html · Aviso do Fabricante