Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imail | Ipswitch | 6.0.2 (including) | 6.0.2 (including) |
| Imail | Ipswitch | 6.0.6 (including) | 6.0.6 (including) |
| Imail | Ipswitch | 7.0.4 (including) | 7.0.4 (including) |