CVE-2002-0410

Опубликовано: 26 июл. 2002

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-03/0004.html
Exploit
Vendor Advisory
http://the.cushman.net/projects/aeromail/download/
http://the.cushman.net/projects/aeromail/download/aeromail-1.45.tar.gz
http://www.iss.net/security_center/static/8345.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4214
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-03/0004.html
Exploit
Vendor Advisory
http://the.cushman.net/projects/aeromail/download/
http://the.cushman.net/projects/aeromail/download/aeromail-1.45.tar.gz
http://www.iss.net/security_center/static/8345.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4214
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:aeromail:aeromail:1.02:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.10:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.20:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.26:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.30:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.40:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01755

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-xv2v-3fj4-g6xm

github

почти 4 года назад