CVE-2005-3431

CVE-2005-3431 describes an absolute path traversal vulnerability in Rockliffe MailSite Express prior to 6.1.22. The issue allows remote attackers to read arbitrary files by supplying a full pathname in the AttachPath field of a mail message under composition. The provided sources confirm the affe...