PT-2005-1393 · Magic · Magic Winmail Server

Tan Chew Keong · Publicado 2005-01-27 · Atualizado 2017-07-11 · CVE-2005-0315

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Magic Winmail Server version 4.0 Build 1112

Description The issue concerns the FTP service, which fails to verify if the IP address in a PORT command matches the IP address of the user's FTP session. This allows remote authenticated users to utilize the server for port scanning.

Recommendations For Magic Winmail Server version 4.0 Build 1112, consider restricting access to the FTP service until a fix is available, or apply configuration changes to verify the IP address in PORT commands to prevent unauthorized use.

Correção

Identificadores relacionados

CVE-2005-0315

Produtos afetados

Magic Winmail Server

Referências · 7

• http://securityfocus.com/bid/12388 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=110685011825461&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19115 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0315 · Nota
• http://secunia.com/advisories/14053 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0315 · Nota de Segurança
• http://securitytracker.com/id?1013017 · Nota