CVE-2005-3431

Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to read arbitrary files via a full pathname in the AttachPath field of a mail message under composition.

• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.htmlPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=113053680631151&w=2
• http://secunia.com/advisories/17240/Patch, Vendor Advisory
• http://securityreason.com/securityalert/126
• http://securitytracker.com/id?1015117
• http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdfPatch, Vendor Advisory
• http://www.securityfocus.com/bid/15231Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22908
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.htmlPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=113053680631151&w=2
• http://secunia.com/advisories/17240/Patch, Vendor Advisory
• http://securityreason.com/securityalert/126
• http://securitytracker.com/id?1015117
• http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdfPatch, Vendor Advisory
• http://www.securityfocus.com/bid/15231Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22908

Published

Nov 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3425Cross-site scripting (XSS) vulnerability in GNUMP3D before 2…
• CVE-2005-3426Cisco CSS 11500 Content Services Switch (CSS) with SSL termi…
• CVE-2005-3427The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.…
• CVE-2005-3428Cross-site scripting (XSS) vulnerability in Rockliffe MailSi…
• CVE-2005-3429Rockliffe MailSite Express before 6.1.22, with the option to…
• CVE-2005-3430Incomplete blacklist vulnerability in Rockliffe MailSite Exp…
• CVE-2005-3432MiniGal 2 (MG2) 0.5.1 allows remote attackers to list passwo…
• CVE-2005-3433Buffer overflow in Mirabilis ICQ 2003a allows user-assisted …
• CVE-2005-3434Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd …
• CVE-2005-3435admin_news.php in Archilles Newsworld up to 1.3.0 allows att…9.8
• CVE-2005-3436Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 a…
• CVE-2005-3437Unspecified vulnerability in the PL/SQL component in Oracle …