Unscored severity · published Aug 11, 2004
CVE-2004-1715
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot…
–
CVSS
2%
EPSS
No
On KEV
Description
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot sequences in the URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Mimesweeper For Web · Clearswift
4.0; 5.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1715
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1715
marc.info
http://marc.info/?l=bugtraq&m=109224211512029&w=2
marc.info
http://marc.info/?l=bugtraq&m=109225567212978&w=2
Exploit
http://packetstormsecurity.nl/0408-exploits/clearswift.txt
Vendor Advisory
http://secunia.com/advisories/12273
Exploit
http://www.securityfocus.com/bid/10918
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16960
More from Mimesweeper For Web
–
CVE-2006-3522
Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which…
–
CVE-2006-3523
Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service (crash) via an encrypted archived .RAR file, which triggers a scan error…
–
CVE-2005-4526
Clearswift MIMEsweeper For Web (a.k.a
–
CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by…