medium5.0Public exploit code
CVE-2005-3811
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User2007-04-01 · webapps · php · Verified
Impact
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amax Information Technologies | Magic Winmail Server | through 4.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
- http://secunia.com/advisories/16665
- http://secunia.com/secunia_research/2005-58/advisory/
- http://securityreason.com/securityalert/195
- http://www.osvdb.org/20925
- http://www.securityfocus.com/bid/15493/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23132
- http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
- http://secunia.com/advisories/16665
- http://secunia.com/secunia_research/2005-58/advisory/
- http://securityreason.com/securityalert/195
- http://www.osvdb.org/20925
- http://www.securityfocus.com/bid/15493/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23132