|
|
Family: CGI abuses --> Category: destructive_attack
Winmail Server <= 4.2 Build 0824 Multiple Vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
Checks for multiple vulnerabilities in Winmail Server <= 4.2 Build 0824
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote webmail server is affected by directory traversal and
cross-site scripting vulnerabilities.
Description :
The remote host is running Winmail Server, a commercial mail server
for Windows from AMAX Information Technologies.
The web interface that is used by Winmail Server for reading mail and
administering the server fails to sanitize user-supplied input to
various parameters and scripts. Beyond the usual cross-site scripting
attacks, this can also be leveraged by an unauthenticated attacker to
overwrite arbitrary files on the affected system, which could
compromise the system's integrity.
See also :
http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
Solution :
Unknown at this time.
Threat Level:
Medium / CVSS Base Score : 4
(AV:R/AC:L/Au:NR/C:N/A:N/I:P/B:I)
Click HERE for more information and discussions on this network vulnerability scan.
|
