Unscored CVE-2001-0642 EUVD-2001-0629GHSA-vhx2-58f3-9f8j

Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive …

Published Aug 29, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in the content.ini file.

References

20010511 [eyeonsecurity.net] Incredimail allows automatic over writing offiles on your hard disk mailing-list
incredimail-dot-overwrite-files(6529) vdb-entry