Rockliffe Mailsite Attachment Disclosure Vulnerability
BID:8133
Info
Rockliffe Mailsite Attachment Disclosure Vulnerability
| Bugtraq ID: | 8133 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 08 2003 12:00AM |
| Updated: | Jul 08 2003 12:00AM |
| Credit: | This issue was reported by tizio caio <[email protected]>. |
| Vulnerable: |
Rockliffe MailSite 5.3.4 |
| Not Vulnerable: | |
Discussion
Rockliffe Mailsite Attachment Disclosure Vulnerability
It has been reported that a vulnerability exists in Rockliffe Mailsite.
If an attacker is able to learn the pathname of a file received as an attachment and stored in a POP3 user's mailbox, the attacker may be able to issue a request for the file directly.
It has been reported that a vulnerability exists in Rockliffe Mailsite.
If an attacker is able to learn the pathname of a file received as an attachment and stored in a POP3 user's mailbox, the attacker may be able to issue a request for the file directly.
Exploit / POC
Rockliffe Mailsite Attachment Disclosure Vulnerability
This vulnerability can be exploited with a Web browser.
This vulnerability can be exploited with a Web browser.
Solution / Fix
Rockliffe Mailsite Attachment Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Rockliffe Mailsite Attachment Disclosure Vulnerability
References:
References:
- MailSite Product Home Page (Rockliffe)
- ZH2003-1SA (security advisory): Rockliffe Mailsite Express (tizio caio