Vulnerabilities > CVE-2005-3431 - Information Disclosure vulnerability in Rockliffe MailSite Express

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
rockliffe
NVD
Published: 2005-11-02
Updated: 2017-07-11

Summary

Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to read arbitrary files via a full pathname in the AttachPath field of a mail message under composition.

Vulnerable Configurations

Part Description Count
Application
Rockliffe
1

References