CVE-2005-1754

published 2005-12-31

CVE-2005-1754: JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the…

Priority P4 28 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

EXPLOIT

JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
apache_tomcat	apache_tomcat	—	—
sun	javamail	—	—
sun	javamail	—	—
sun	javamail	—	—
sun	javamail	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200