AL-Mail32 CVE-2015-0878 Directory Traversal Vulnerability
BID:72722
Info
AL-Mail32 CVE-2015-0878 Directory Traversal Vulnerability
| Bugtraq ID: | 72722 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0878 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 24 2015 12:00AM |
| Updated: | Feb 24 2015 12:00AM |
| Credit: | Yosuka HASEGAWA of NetAgent |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
AL-Mail32 CVE-2015-0878 Directory Traversal Vulnerability
AL-Mail32 is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue will allow an attacker to create or overwrite an arbitrary file within the context of the web server. Information harvested may aid in launching further attacks.
AL-Mail32 is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue will allow an attacker to create or overwrite an arbitrary file within the context of the web server. Information harvested may aid in launching further attacks.
Exploit / POC
AL-Mail32 CVE-2015-0878 Directory Traversal Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
AL-Mail32 CVE-2015-0878 Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
AL-Mail32 CVE-2015-0878 Directory Traversal Vulnerability
References:
References: