CVEvulnerability

CVE-2002-1581

5.0 MEDIUM Published 2004-12-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.

Affected configurations

• mailreader.com mailreader.com 2.3.20 • mailreader.com mailreader.com 2.3.21 • mailreader.com mailreader.com 2.3.22 • mailreader.com mailreader.com 2.3.23 • mailreader.com mailreader.com 2.3.24 • mailreader.com mailreader.com 2.3.25 • mailreader.com mailreader.com 2.3.26 • mailreader.com mailreader.com 2.3.27 • mailreader.com mailreader.com 2.3.28 • mailreader.com mailreader.com 2.3.29 • mailreader.com mailreader.com 2.3.30 • mailreader.com mailreader.com 2.3.31 • debian debian linux 3.0

References