Debian DSA-534-1 : mailreader - directory traversal

A directory traversal vulnerability was discovered in mailreader whereby remote attackers could view arbitrary files with the privileges of the nph-mr.cgi process by default, www-data via relative paths and a null byte in the configLanguage parameter. %NASLMINLEVEL 70300 C Tenable Network Securit...

[SECURITY] [DSA 534-1] New mailreader packages fix directory traversal vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 534-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 22nd, 2004 http://www.debian.org/security/faq -...