CVE-2012-1916

概要

参考情報

• atmail.org/download/atmailopen.tgz · Patch
• en.securitylab.ru/lab/PT-2011-48
• secunia.com/advisories/47012
• kb.cert.org/vuls/id/743555 · US Government Resource

atmail open のその他の脆弱性

• CVE-2012-1920中 5.0@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request…
• CVE-2012-1919中 6.4CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct direct…
• CVE-2012-1918中 5.0Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Sourc…
• CVE-2012-1917中 5.0compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique p…
• CVE-2011-4540中 4.3Multiple cross-site scripting (XSS) vulnerabilities in AtMail Open (aka AtMail Open-Source edition) 1.04 allow remote attackers to inject ar…