PT-2005-1393 · Magic · Magic Winmail Server

Tan Chew Keong · Published 2005-01-27 · Updated 2017-07-11 · CVE-2005-0315

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Magic Winmail Server version 4.0 Build 1112

Description The issue concerns the FTP service, which fails to verify if the IP address in a PORT command matches the IP address of the user's FTP session. This allows remote authenticated users to utilize the server for port scanning.

Recommendations For Magic Winmail Server version 4.0 Build 1112, consider restricting access to the FTP service until a fix is available, or apply configuration changes to verify the IP address in PORT commands to prevent unauthorized use.

Fix

Related Identifiers

CVE-2005-0315

Affected Products

Magic Winmail Server

References · 7

• http://securityfocus.com/bid/12388 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0315 · Security Note
• http://marc.info/?l=bugtraq&m=110685011825461&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19115 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0315 · Note
• http://secunia.com/advisories/14053 · Note
• http://securitytracker.com/id?1013017 · Note