Description
Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files.
References
- [listar-dev] 20060119 [EDev] Re: Potential vulnerability -- who to contact? mailing-list
- 18524 third-party-advisory
- ADV-2006-0260 vdb-entry
- [listar-dev] 20060115 [EDev] Re: Potential vulnerability -- who to contact? mailing-list
- 16317 vdb-entry
- ecartis-pantomime-bypass-security(24220) vdb-entry