Nessus Plugin #14630

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

IlohaMail Arbitrary File Access via Language Variable

Family:

Remote file access

Category:

infos

Copyright:

This script is Copyright (C) 2004-2005 George A. Theall

Summary:

Checks for Arbitrary File Access via Language Variable vulnerability in IlohaMail

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

OSVDB:7400

Description:

The target is running at least one instance of IlohaMail version
0.7.10 or earlier. Such versions contain a flaw in the processing of
the language variable that allows an unauthenticated attacker to
retrieve arbitrary files available to the web user.

Solution : Upgrade to IlohaMail version 0.7.11 or later.
Risk factor : Medium