CVE-2012-6274

BigAnt Server (BigAnt IM Message Server) is affected by CVE-2012-6274: an authentication bypass that permits remote unauthenticated file uploads to AntServer\DocData\Public via DUPF processing, with a reported directory-traversal weakness contributing to arbitrary file upload. Connected advisorie...

CVE-2012-6275

Summary: CVE-2012-6275 affects BigAntSoft BigAnt IM Message Server’s AntDS.exe, where a stack-based buffer overflow is triggered by handling the filename header in SCH requests or the userid field in DUPF requests. This can allow remote, unauthenticated attackers to influence the process, potenti...

CVE-2012-6273

CVE-2012-6273 : BigAntSoft BigAnt IM Message Server is affected by an SQL injection vulnerability where a search-user (SHU) request is constructed with insufficient sanitization, allowing remote execution of arbitrary SQL commands. The issue is consistently described across sources as an injectio...