CVE-2005-1252
medium · 5Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file.
5
CVSS
12.5%
EPSS (exploit prob.)
96th
EPSS percentile
2005-05-25
Published
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ipswitch | imail | 8.13 |
| ipswitch | imail_server | <= 8.2_hotfix_2 |
Check a specific version with /api/v1/cve/match.
References
- http://securitytracker.com/id?1014047
- http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities
- http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
- http://www.securityfocus.com/bid/13727
- http://securitytracker.com/id?1014047
- http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities
- http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
- http://www.securityfocus.com/bid/13727
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-1252