CVE-2006-0611

Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter.

Date published : 2006-02-08

http://www.securityfocus.com/bid/16470

http://kb.atmail.com/view_article.php?num=374