Unscored CVE-2002-0418 EUVD-2002-0415GHSA-v5gw-6wv6-2mj2

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows…

Published Jun 11, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.

References

sakemail-paramname-directory-traversal(8358) vdb-entry
20020305 Endymion SakeMail and MailMan File Disclosure Vulnerability mailing-list
4223 vdb-entry