Description
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in the type parameter.
References
- 20020403 emumail.cgi mailing-list
- emumail-cgi-view-files(8766) vdb-entry
- 4435 vdb-entry
- http://www.emumail.com/downloads/download_unix.html/