Directory traversal

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

CVE-2012-4940

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

CVE-2012-4940

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

CVE-2012-4940

The Axigen Free Mail Server is vulnerable to multiple directory traversal flaws within the View Log Files component. The root cause is the failure of the index.hsp script to properly sanitize user input, specifically the fileName parameter. Remote attackers can use .. sequences to read or delete ...

CVE-2012-4940: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

PT-2012-5674

Name of the Vulnerable Software and Affected Versions Axigen Free Mail Server affected versions not specified Description The issue concerns multiple directory traversal vulnerabilities in the View Log Files component. These vulnerabilities allow remote attackers to read or delete arbitrary files...

Mercury SMTPD Remote Preauth Stack Based Overrun PoC

No description provided by source. If there are images in this attachment, they will not be displayed. Download the original attachment Mercury Mail Transport System Remote Stack Based Overflow Overview Mercury Mail Transport System: Mercury is a free, standards-based mail server solution,...