Exploit Sun JavaMail 1.3.2 - 'MimeBodyPart.getFileName' Directory Traversal

[Exploiter]

EDB-ID

25395

Проверка EDB

1. Пройдено

Автор

RAFAEL SAN MIGUEL CARRASCO

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

cve-2005-1105

Дата публикации

2005-04-12

source: https://www.securityfocus.com/bid/13141/info

Sun JavaMail is prone to a directory traversal vulnerability. This arises because the API fails to properly validate filenames in email attachments received by the applet.

This issue was reported to affect JavaMail 1.3.2, however, earlier versions may also be vulnerable. 

Content-Disposition: ../../../file.ext