Description
NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remote attackers to execute arbitrary code by accessing the e-mail attachment via directory traversal vulnerabilities.
References
- 1015671 vdb-entry
- 20060223 NOCC Webmail <= 1.0 multiple vulnerabilities mailing-list
- 23420 vdb-entry
- 16921 third-party-advisory
- http://retrogod.altervista.org/noccw_10_incl_xpl.html
- 16793 vdb-entry