EUVD-2001-1266

Malware in sbrugna...

CVE-2001-1285: Undefined Security Weakness

Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. dot dot in the mbx parameter...

CVE-2001-1283: Undefined Security Weakness

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service crash via a mailbox name that contains a large number of . dot or other characters to programs such as 1 readmail.cgi or 2 printmail.cgi, possibly due to a buffer overflow that...