Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mail-gear | Symantec | 1.0 (including) | 1.0 (including) |
References
- http://www.osvdb.org/1144
- http://www.securityfocus.com/bid/827
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026msg=NCBBKFKDOLAGKIAPMILPCEAFCBAA.labs%40ussrback.com
- http://www.osvdb.org/1144
- http://www.securityfocus.com/bid/827
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026msg=NCBBKFKDOLAGKIAPMILPCEAFCBAA.labs%40ussrback.com