109 matches found
Winmail Server <= 4.2 Build 0824 Multiple Vulnerabilities
The remote host is running Winmail Server, a commercial mail server for Windows from AMAX Information Technologies. The web interface that is used by Winmail Server for reading mail and administering the server fails to sanitize user-supplied input to various parameters and scripts. Beyond the...
CVE-2005-3692
CVE-2005-3692 affects AMAX Magic Winmail Server 4.2 and earlier with a cross-site scripting (XSS) flaw. The vulnerability allows remote attackers to inject arbitrary web script or HTML via (1) the retid parameter in badlogin.php, (2) Content-Type headers in HTML mails, and (3) HTML mail attachmen...
CVE-2005-3692
Cross-site scripting XSS vulnerability in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 retid parameter in badlogin.php, 2 Content-Type headers in HTML mails, and 3 HTML mail attachments...
[Full-disclosure] Secunia Research: Winmail Server Multiple Vulnerabilities
====================================================================== Secunia Research 18/11/2005 - Winmail Server Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...
Winmail Server <= 4.2 Multiple Vulnerabilities
Binary data 3300.prm...
Winmail Mail Server Information Disclosure
Three scripts that come with the installed Winmail Server chgpwd.php, domain.php and user.php allow a remote attacker to disclose sensitive information about the remote host. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are...
[NT] Magic Winmail Server's Multiple Vulnerabilities
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2005-0313
CVE-2005-0313 affects Magic Winmail Server 4.0 Build 1112. The vulnerability comprises multiple directory traversal weaknesses allowing remote attackers to upload files via upload.php and read arbitrary files via download.php, plus risk from authenticated IMAP commands (CREATE, EXAMINE, SELECT, D...
CVE-2005-0314
The CVE-2005-0314 entry describes a Cross-site Scripting (XSS) vulnerability in the Magic Winmail Server 4.0 Build 1112, specifically in user.php, where remote attackers can inject arbitrary web script or HTML through personal information fields. The connected records corroborate the same vulnera...
CVE-2005-0315
The CVE-2005-0315 entry concerns the FTP service in Magic Winmail Server 4.0 Build 1112, where the FTP PORT command does not verify that the command IP matches the FTP session user’s IP. This permits remote authenticated users to use the server as an intermediary for port scanning. The connected ...
CVE-2005-0314
Cross-site scripting XSS vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields...
CVE-2005-0315
The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning...
[SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities
SIG^2 Vulnerability Research Advisory Magic Winmail Server v4.0 Multiple Vulnerabilities by Tan Chew Keong Release Date: 27 Jan 2005 ADVISORY URL http://www.security.org.sg/vuln/magicwinmail40.html SUMMARY Magic Winmail Server http://www.magicwinmail.net/ is an enterprise class mail server softwa...
CVE-2005-0314
Cross-site scripting XSS vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields...
Magic Winmail Server 4.0 (Build 1112) - download.php Traversal Arbitrary File Access
Magic Winmail Server 4.0 Build 1112 - download.php Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface...
Magic Winmail Server 4.0 (Build 1112) - upload.php Traversal Arbitrary File Upload
Magic Winmail Server 4.0 Build 1112 - upload.php Traversal Arbitrary File Upload source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowi...
Magic Winmail Server 4.0 (Build 1112) - 'download.php' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads. There is also a HTML injection...
CVE-2004-2572
AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering 1 invalid characters such as "" or 2 a large number of characters in the Lookup field on the netaddressbook.php web form, which reveals the path in an ldaplib.php error message when the ldapsearch...
[SA13438] Winmail Server Installation Path Disclosure Weakness
TITLE: Winmail Server Installation Path Disclosure Weakness SECUNIA ADVISORY ID: SA13438 VERIFY ADVISORY: http://secunia.com/advisories/13438/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Winmail Server 4.x http://secunia.com/product/4370/ DESCRIPTION...
CVE-2003-0391
Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the PASS command...