First published: Tue Jul 06 2004(Updated: )
Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mailreader.com Mailreader.com | =2.3.29 | |
Mailreader.com Mailreader.com | =2.3.20 | |
Mailreader.com Mailreader.com | =2.3.21 | |
Mailreader.com Mailreader.com | =2.3.30 | |
Mailreader.com Mailreader.com | =2.3.25 | |
Mailreader.com Mailreader.com | =2.3.22 | |
Mailreader.com Mailreader.com | =2.3.24 | |
Mailreader.com Mailreader.com | =2.3.23 | |
Mailreader.com Mailreader.com | =2.3.28 | |
Mailreader.com Mailreader.com | =2.3.31 | |
Mailreader.com Mailreader.com | =2.3.26 | |
Mailreader.com Mailreader.com | =2.3.27 | |
Debian Debian Linux | =3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.