CVE-2008-0946

The CVE-2008-0946 entry affects Ipswitch Instant Messaging (IM Server, aka IMserve/IMserver) up to version 2.0.8.1. The vulnerability is a directory traversal via ".." in the recipient field, permitting remote authenticated users to create arbitrary empty files. The NVD entry lists moderate sever...