CVE-2005-1105

CVE-2005-1105 describes a directory traversal vulnerability in the MimeBodyPart.getFileName method of Sun JavaMail 1.3.2. An unauthenticated remote attacker can exploit this by including ".." (dot dot) sequences in the filename within the Content-Disposition header, allowing them to write arbitrary files to unintended locations. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and potential for partial integrity impact. While there is no evidence of active exploitation, an exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal.