Back

CVE-2004-2446

Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." (dot dot) sequences in unknown vectors.

Published: Dec 31, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
1st_class_internet_solutions 1st_class_mail_server 4.01

GitHub Security Advisory GHSA-vvpv-67wf-32c7

Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 2.03%

Top 21% most likely to be exploited

Threat Score 20.6 / 100

Data Sources

NVD EPSS GitHub