CVE-2005-4557

The IceWarp Web Mail 5.5.1 component, integrated into Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1 , contains a directory traversal vulnerability. A remote attacker can exploit the lang parameter in dir/include.html by using a null byte (%00) to include arbitrary local ...