VULNERABILITY INTELLIGENCE
CVE-2001-0642
CVSS score2.1 LOW
EPSS probability0.49%
CISA KEVNot currently listed
Published2001-09-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N
Description
Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in the content.ini file.
Primary references
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108