Description
Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the UIDL parameter.
References
- http://www.nsag.ru/vuln/877.html
- 18990 third-party-advisory
- ADV-2006-0733 vdb-entry
- 487 third-party-advisory