Back
CVE-2004-2446
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." (dot dot) sequences in unknown vectors.
Published: Dec 31, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| 1st_class_internet_solutions | 1st_class_mail_server | 4.01 |
GitHub Security Advisory GHSA-vvpv-67wf-32c7
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read...
References (12)
- http://members.lycos.co.uk/r34ct/main/1st%20Class%20mail%20server%204.01.txt Vendor Advisory
- http://secunia.com/advisories/11330 Vendor Advisory
- http://securitytracker.com/alerts/2004/Apr/1009705.html Vendor Advisory
- http://www.osvdb.org/5011
- http://www.securityfocus.com/bid/10089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15812
- http://members.lycos.co.uk/r34ct/main/1st%20Class%20mail%20server%204.01.txt Vendor Advisory
- http://secunia.com/advisories/11330 Vendor Advisory
- http://securitytracker.com/alerts/2004/Apr/1009705.html Vendor Advisory
- http://www.osvdb.org/5011
- http://www.securityfocus.com/bid/10089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15812
Risk Scores
CVSS Score
5.0 / 10
EPSS Score
2.03%
Top 21% most likely to be exploited
Threat Score
20.6 / 100
Data Sources
NVD
EPSS
GitHub