Vulnerabilities > CVE-2004-2586 - Unspecified vulnerability in Smartertools Smartermail 1.6.1511/1.6.1529
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files via the filename parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
References
- http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt
- http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt
- http://secunia.com/advisories/11042
- http://secunia.com/advisories/11042
- http://securitytracker.com/id?1009307
- http://securitytracker.com/id?1009307
- http://www.zone-h.org/advisories/read/id=4098
- http://www.zone-h.org/advisories/read/id=4098
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15389
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15389