Description
Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
References
- 4172 third-party-advisory
- 30700 vdb-entry
- 31534 third-party-advisory
- mailscan-admininterface-directory-traversal(44514) vdb-entry
- 20080815 Re: MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface mailing-list
- 6407 exploit
- http://www.oliverkarow.de/research/mailscan.txt