20051118 Secunia Research: Winmail Server Multiple Vulnerabilitiesmailing list
http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html CVE-2005-3811
WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User
Record summary
CVE-2005-3811 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super UserExploitDB exploitby rgodNot analyzed1 file
References
816665Third-party advisory
http://secunia.com/advisories/16665 secunia.com
http://secunia.com/secunia_research/2005-58/advisory 195Third-party advisory
http://securityreason.com/securityalert/195 20925vdb entry
http://www.osvdb.org/20925 15493vdb entry
http://www.securityfocus.com/bid/15493 winmail-main-file-overwrite(23132)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/23132 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-3811