CVE:CVE-2015-2953
CNNVD:CNNVD-201506-207
Igreks MilkyStep是日本Igreks公司的一个通过电子邮件系统进行杂志推送的CGI。MilkyStep Light和MilkyStep Professional分别是轻量级版本和专业级版本。
Igreks MilkyStep Light 0.94及之前版本和Professional 1.82及之前版本中存在安全漏洞。远程攻击者可利用该漏洞绕过既定的访问限制，并读取文件。
solution:Upgrade igreks milkystep_light to a higher version than 0.94,and avoid the version (,0.94]; Upgrade igreks milkystep_professional to a higher version than 1.82,and avoid the version (,1.82]; Upgrade igreks milkystep_professional_oem to a higher version than 1.82,and avoid the version (,1.82]