CVEvulnerability

CVE-2001-0642

2.1 LOW Published 2001-09-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-09-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N

Description

Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in the content.ini file.

Affected configurations

• incredimail incredimail (<= 1400185)

References