Sun JavaMail 1.3.2 - 'MimeBodyPart.getFileName' Directory Traversal

EDB-ID:

25395




Platform:

Multiple

Date:

2005-04-12


source: https://www.securityfocus.com/bid/13141/info

Sun JavaMail is prone to a directory traversal vulnerability. This arises because the API fails to properly validate filenames in email attachments received by the applet.

This issue was reported to affect JavaMail 1.3.2, however, earlier versions may also be vulnerable. 

Content-Disposition: ../../../file.ext