Back
CVE-2005-1105
Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Disposition header.
Published: May 2, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| sun | javamail | 1.3.2 |
GitHub Security Advisory GHSA-8wfc-hch7-gvrx
Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows...
Risk Scores
CVSS Score
5.0 / 10
EPSS Score
5.83%
Top 7% most likely to be exploited
Threat Score
21.8 / 100
Data Sources
NVD
EPSS
GitHub