EMUMail Arbitrary File Reading Vulnerability
BID:4435
Info
EMUMail Arbitrary File Reading Vulnerability
| Bugtraq ID: | 4435 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 04 2002 12:00AM |
| Updated: | Apr 04 2002 12:00AM |
| Credit: | Vulnerability discovery credited to <[email protected]>. |
| Vulnerable: |
EMUMail EMUMail for Unix 5.1 EMUMail EMUMail for Unix 5.0 EMUMail EMUMail for Red Hat Linux 5.1 EMUMail EMUMail for Red Hat Linux 5.0 EMUMail EMUMail 3.0 |
| Not Vulnerable: | |
Discussion
EMUMail Arbitrary File Reading Vulnerability
Emumail is a web mail package available from Emumail, Inc. It is designed for use on Linux, Unix, and Windows systems.
It may be possible for a remote user to gain access to some files through email. By supplying the full path to a file as an argument to the type= function of emumail.cgi, a user may be able to see the contents of the specified file. The request must end with a null character (%00).
Emumail is a web mail package available from Emumail, Inc. It is designed for use on Linux, Unix, and Windows systems.
It may be possible for a remote user to gain access to some files through email. By supplying the full path to a file as an argument to the type= function of emumail.cgi, a user may be able to see the contents of the specified file. The request must end with a null character (%00).
Solution / Fix
EMUMail Arbitrary File Reading Vulnerability
Solution:
Fixes available:
EMUMail EMUMail 3.0
EMUMail EMUMail for Red Hat Linux 5.0
EMUMail EMUMail for Unix 5.0
EMUMail EMUMail for Red Hat Linux 5.1
EMUMail EMUMail for Unix 5.1
Solution:
Fixes available:
EMUMail EMUMail 3.0
-
EMUMail EmuWebmail-5.1.0-PATCH101.tgz
http://www.emumail.com/bin/EmuWebmail-5.1.0-PATCH101.tgz
EMUMail EMUMail for Red Hat Linux 5.0
-
EMUMail EmuWebmail-5.1.0-PATCH101.tgz
http://www.emumail.com/bin/EmuWebmail-5.1.0-PATCH101.tgz
EMUMail EMUMail for Unix 5.0
-
EMUMail EmuWebmail-5.1.0-PATCH101.tgz
http://www.emumail.com/bin/EmuWebmail-5.1.0-PATCH101.tgz
EMUMail EMUMail for Red Hat Linux 5.1
-
EMUMail EmuWebmail-5.1.0-PATCH101.tgz
http://www.emumail.com/bin/EmuWebmail-5.1.0-PATCH101.tgz
EMUMail EMUMail for Unix 5.1
-
EMUMail EmuWebmail-5.1.0-PATCH101.tgz
http://www.emumail.com/bin/EmuWebmail-5.1.0-PATCH101.tgz