TransmitMail CVE-2015-0911 Directory Traversal Vulnerability

Bugtraq ID:	74329
Class:	Input Validation Error
CVE:	CVE-2015-0911
Remote:	Yes
Local:	No
Published:	Apr 23 2015 12:00AM
Updated:	Apr 23 2015 12:00AM
Credit:	Gen Sato of TRADE WORKS.
Vulnerable:	dounokouno TransmitMail 1.5.8 dounokouno TransmitMail 1.5.7 dounokouno TransmitMail 1.5.6 dounokouno TransmitMail 1.5.5 dounokouno TransmitMail 1.5.4 dounokouno TransmitMail 1.5.3 dounokouno TransmitMail 1.5.2 dounokouno TransmitMail 1.5.1 dounokouno TransmitMail 1.5 dounokouno TransmitMail 1.4.2 dounokouno TransmitMail 1.4.1 dounokouno TransmitMail 1.4 dounokouno TransmitMail 1.3.1 dounokouno TransmitMail 1.3 dounokouno TransmitMail 1.2.1 dounokouno TransmitMail 1.2 dounokouno TransmitMail 1.1.4 dounokouno TransmitMail 1.1.3 dounokouno TransmitMail 1.1.2 dounokouno TransmitMail 1.1.1 dounokouno TransmitMail 1.1 dounokouno TransmitMail 1.0.11
Not Vulnerable:

TransmitMail CVE-2015-0911 Directory Traversal Vulnerability

TransmitMail is prone to a directory-traversal vulnerability.

Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to overwrite arbitrary files in the context of the application. This may aid in further attacks.

TransmitMail CVE-2015-0911 Directory Traversal Vulnerability

An attacker can exploit this issue using standard commands and readily available tools.

TransmitMail CVE-2015-0911 Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.