PT-2015-4934 · All-Mail · Al-Mail32

Yosuka Hasegawa · Published 2015-02-20 · Updated 2015-02-20 · CVE-2015-0878

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions AL-Mail32 versions prior to 1.13d

Description A directory traversal issue allows remote attackers to write to arbitrary files by crafting the filename of an attachment.

Recommendations For versions prior to 1.13d, update to version 1.13d or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2015-0878

Affected Products

Al-Mail32

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-0878 · Security Note
• http://almail.com/vulnerability.html · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000020 · Vendor Advisory
• http://jvn.jp/en/jp/JVN77294617/index.html · Vendor Advisory