CVE-2005-3811

Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-11-25

Last modified

2024-08-07

Affected products

• Magic Winmail Server (Amax Information Technologies)

References

• http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
• http://secunia.com/advisories/16665
• http://secunia.com/secunia_research/2005-58/advisory/
• http://securityreason.com/securityalert/195
• http://www.osvdb.org/20925
• http://www.securityfocus.com/bid/15493/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23132