CNCVE编号：CNCVE-20020010 CVE编号： 安全级别：高 漏洞中文描述： AeroMail是种基于WEB的电子邮件系统，由Mark Cushman负责开发、维护，可用于Windows、Unix操作系统。旧版的AeroMail允许用户指定一个WEB根目录中的文件作为附件，这潜在允许用户远程获取敏感文件。 漏洞英文描述： AeroMail is a web based email program maintained by Mark Cushman. AeroMail is designed for Windows and Unix systems. An issue exists in versions of AeroMail, which could allow a user to include files residing in the hosts web root, as an attachment to email messages. As a result it is possible for users to obtain sensitive information residing on the host. This information could assist in further attacks against the host. 漏洞参考： 系统类型：其他 漏洞类型：设计错误