Bug#304712: avaMail allows directory traversal in attachments (CAN-2005-1105)

Wed Apr 25 09:43:44 UTC 2007

El dc 25 de 04 del 2007 a les 07:12 +0200, en/na Florian Weimer va
escriure:
> It's from the GNU implementation against which this bug report was
> filed.

I still don't know the origin. It may be from JavaMail 1.3.2
implementation.

http://cvs.savannah.gnu.org/viewcvs/mail/source/javax/mail/internet/MimeBodyPart.java?root=classpathx&r1=1.1&r2=1.2
This was the initial documentation and the current one is very similar.

gnumail has never had that text in its implementation.