Vulnerabilities > CVE-2001-1408 - Directory Traversal vulnerability in Cobalt Qube and Webmail

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
cobalt
nessus
exploit available
NVD
Published: 2001-07-05
Updated: 2017-12-19

Summary

Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter.

Vulnerable Configurations

Part Description Count
Application
Cobalt
2

Exploit-Db

descriptionCobalt Qube Webmail 1.0 Directory Traversal Vulnerability. CVE-2001-1408. Webapps exploit for php platform
idEDB-ID:20995
last seen2016-02-02
modified2001-07-05
published2001-07-05
reporterkf
sourcehttps://www.exploit-db.com/download/20995/
titlecobalt qube webmail 1.0 - Directory Traversal Vulnerability

Nessus

NASL familyCGI abuses
NASL idCOBALT_CUBE_WEBMAIL_DIR_TRAV.NASL
descriptionThe file
last seen2020-06-01
modified2020-06-02
plugin id11073
published2002-08-14
reporterThis script is Copyright (C) 2002-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/11073
titleCobalt Qube WebMail readmsg.php mailbox Parameter Traversal Arbitrary File Access

References