Gossamer Forum
Home : Products : Gossamer Mail : Discussion :

Is Gossamer Mail protected against Webmail Attachment Upload Directory Traversal

Quote Reply
Is Gossamer Mail protected against Webmail Attachment Upload Directory Traversal
Is gossamer mail protected against webmail attachment upload directory traversal? This is something which has been reported in @mail so just enquiring. Running gossamer mail under mod_perl (apache1.3.x) . We do have some directory travesal protection thru mod_security though i think.

Thanks
HyTC
==================================
Mail Me If Contacting Privately Is That Necessary.
==================================

Last edited by:

HyperTherm: Feb 2, 2006, 3:24 AM
Quote Reply
Re: [HyperTherm] Is Gossamer Mail protected against Webmail Attachment Upload Directory Traversal In reply to
Attachments are only accessible through webmail.cgi and it checks that you are the owner of the attachment id.

Adrian