NuytsTech Security

CVE-2007-2231

by ·

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.

Date published : 2007-04-25

http://www.securityfocus.com/bid/23552

http://www.securityfocus.com/archive/1/466168/100/0/threaded

Tags: