CVE-2007-3702

CVE-2007-3702 describes a directory traversal vulnerability in the Mail Machine product (v3.989 and earlier). The issue resides in the load function of cgi-bin/mail/mailmachine.cgi, where an attacker can cause the system to read arbitrary files by supplying a: .. sequence in the archives paramete...