cve/2008/CVE-2008-0946.md

CVE-2008-0946

Description

Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field.

POC

Reference

• http://aluigi.altervista.org/adv/ipsimene-adv.txt
• http://aluigi.org/poc/ipsimene.zip
• http://securityreason.com/securityalert/3697

Github

No PoCs found on GitHub currently.