JavaMail API Direct Request Arbitrary Mail Attachment Access

2005-05-25T02:34:53
ID OSVDB:17090
Type osvdb
Reporter OSVDB
Modified 2005-05-25T02:34:53

Description

Manual Testing Notes

http://[victim]/mailboxesdir/user2@example.com/ http://[victim]/mailboxesdir/user3@example.com/

References:

Vendor URL: http://java.sun.com/products/javamail/ Related OSVDB ID: 17089 Related OSVDB ID: 17092 Related OSVDB ID: 17091 Related OSVDB ID: 17093 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-05/0277.html