Description
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot sequences in the URL.
References
- 10918 vdb-entry
- 20040811 Re: Clearswift Mimesweeper Path Traversal Vulnerability mailing-list
- http://packetstormsecurity.nl/0408-exploits/clearswift.txt
- 20040811 Clearswift Mimesweeper Path Traversal Vulnerability mailing-list
- 12273 third-party-advisory
- mimesweeper-directory-traversal(16960) vdb-entry