CVEvulnerability
CVE-2004-1715
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-08-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot sequences in the URL.
Affected configurations
• clearswift mimesweeper for web 4.0
• clearswift mimesweeper for web 5.0.1
References
- http://marc.info/?l=bugtraq&m=109224211512029&w=2 marc.info
- http://marc.info/?l=bugtraq&m=109225567212978&w=2 marc.info
- http://packetstormsecurity.nl/0408-exploits/clearswift.txt Exploit, Vendor Advisory
- http://secunia.com/advisories/12273 Vendor Advisory
- http://www.securityfocus.com/bid/10918 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16960 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109224211512029&w=2 marc.info
- http://marc.info/?l=bugtraq&m=109225567212978&w=2 marc.info
- http://packetstormsecurity.nl/0408-exploits/clearswift.txt Exploit, Vendor Advisory
- http://secunia.com/advisories/12273 Vendor Advisory
- http://www.securityfocus.com/bid/10918 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16960 exchange.xforce.ibmcloud.com