CVE-2005-1105

Currently unrated

Key Information:

Vendor
Oracle
Status
Javamail
Vendor
CVE Published:
2 May 2005

Summary

Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Disposition header.

References

http://marc.info/?l=bugtraq&m=111335615600839&w=2
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.