CVE-2002-1004

Published: Oct 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.

Affected (2)

Products: Argosoft: Argosoft Mail Server

Argosoft

1 product

Argosoft Mail Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Argosoft Argosoft Mail Server	Version 1.8.1.5
Argosoft Argosoft Mail Server	Version 1.8.1.5

References (8)

http://archives.neohapsis.com/archives/bugtraq/2002-07/0029.html

Source: cve@mitre.org

http://www.argosoft.com/applications/mailserver/changelist.asp

Source: cve@mitre.org

http://www.iss.net/security_center/static/9477.php

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/5144

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2002-07/0029.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.argosoft.com/applications/mailserver/changelist.asp

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/9477.php

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/5144

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

Timeline

No history available yet.